Rapid7 InsightVM MCP Server

Connect your Rapid7 InsightVM (formerly Nexpose) platform directly to your AI agent. By granting this access, your AI becomes a highly interactive cybersecurity assistant, allowing engineers and security analysts to query vulnerabilities, review asset health, and start scans right from their workspace or IDE.

What you can do

• Asset Querying — Retrieve comprehensive inventory lists to discover all tracked computing assets and read their operating system fingerprints and hardware information.
• Vulnerability Checks — Scan specific assets to instantly read CVE numbers mapped against them, alongside full vulnerability advisories and remediation guidelines.
• Scan Operations — Read chronologically maintained assessment scans and track their execution status without jumping between consoles.
• Site Management — Explore configured network sites, observing their designated scanning scopes and reviewing overall health risks.
• Trigger Scanning — Force an immediate re-evaluation scan on a specified site after applying a patch, validating your resolution securely.

How it works

1. Authorize the server module inside your environment.
2. Add the URL and port of your Rapid7 Security Console alongside a dedicated set of credentials (username and password) configured as Basic Authentication.
3. Chat with your AI to start asking about the latest threats affecting your domain servers.

Who is this for?

• Cybersecurity Analysts (SOC) — Analyze identified security flaws and fetch CVE details and remediation instructions without leaving their incident response platform.
• DevOps & SysAdmins — Quickly order a vulnerability assessment on a subnet after applying OS updates to check if the threat is successfully patched.
• Network Engineers — Evaluate site configurations directly when provisioning new subnets to ensure full scanning scope coverage.