Tool reference¶
gvm-mcp exposes 194 tools in 25 toolsets; 99 of them
are read-only. Tool and parameter names follow gvmd’s own vocabulary, so
what you know from the web interface applies here. Choose toolsets with
--toolsets and drop every mutating tool with --read-only (see
Toolsets).
Toolset |
Scope |
Tools |
Read-only |
Default |
|---|---|---|---|---|
Connectivity, health, version and timezone information |
3 |
3 |
yes |
|
Scan targets (hosts, port lists), OCI image and web application targets |
18 |
6 |
yes |
|
Scan tasks and their lifecycle (start/stop/resume/clone) |
9 |
2 |
yes |
|
Scan configurations, NVT/family selection, preferences and generic configs |
16 |
8 |
yes |
|
Scanner instances |
2 |
2 |
yes |
|
Scan schedules |
5 |
2 |
yes |
|
Authenticated-scan credentials and credential stores |
9 |
4 |
yes |
|
Alerts and notifications |
5 |
2 |
yes |
|
Port lists |
5 |
2 |
yes |
|
Individual scan results |
2 |
2 |
yes |
|
Scan reports, drill-down pages, imports and exports |
18 |
15 |
yes |
|
Host, operating-system and generic assets |
13 |
6 |
yes |
|
TLS certificates discovered by scans |
2 |
2 |
yes |
|
Report formats |
2 |
2 |
yes |
|
Saved filters |
6 |
2 |
yes |
|
Tags on resources |
6 |
2 |
yes |
|
Notes on results |
5 |
2 |
yes |
|
Severity overrides |
5 |
2 |
yes |
|
NVTs and NVT families |
3 |
3 |
yes |
|
CVE, CPE, CERT-Bund and DFN-CERT catalogs |
8 |
8 |
yes |
|
Vulnerability listing |
1 |
1 |
yes |
|
Feed status |
1 |
1 |
yes |
|
Compliance audits and policies |
13 |
4 |
yes |
|
Sensor agents and agent groups |
14 |
6 |
yes |
|
Users, groups, roles, permissions (opt-in) |
23 |
10 |
opt-in |