qualys-mcp 2.1.3__py3-none-any.whl → 2.1.5__py3-none-any.whl

{qualys_mcp-2.1.3.dist-info → qualys_mcp-2.1.5.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: qualys-mcp
-Version: 2.1.3
+Version: 2.1.5
 Summary: MCP server for Qualys security APIs - natural language interaction with vulnerability, asset, and cloud security data
 Project-URL: Homepage, https://github.com/nelssec/qualys-mcp
 Project-URL: Repository, https://github.com/nelssec/qualys-mcp

qualys_mcp-2.1.5.dist-info/RECORD

@@ -0,0 +1,6 @@
+qualys_mcp.py,sha256=mWx-ygYB1S1cDlO4bkb8nCyTOaSBFwpUwy8r-dhF3Yg,32079
+qualys_mcp-2.1.5.dist-info/METADATA,sha256=3hHgBza5aNzc7isX-18NtFThXnSyUyy7EeX-X18ZHFs,3295
+qualys_mcp-2.1.5.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+qualys_mcp-2.1.5.dist-info/entry_points.txt,sha256=Dc8X0AhJDjGaZOJ0SNpWDWjEX4sYzrYa9FZEbggX0Rs,47
+qualys_mcp-2.1.5.dist-info/licenses/LICENSE,sha256=dW3nC4AX_VbxPAgneSDR-miZPiHgAYw5JhPtdbUEt_E,1091
+qualys_mcp-2.1.5.dist-info/RECORD,,

qualys_mcp.py

@@ -42,7 +42,7 @@ def get_bearer_token():
         return None
 
 
-def api_get(url, gateway=False):
+def api_get(url, gateway=False, timeout=30):
     req = Request(url)
     if gateway:
         token = get_bearer_token()
@@ -51,7 +51,7 @@ def api_get(url, gateway=False):
         req.add_header('Authorization', f'Basic {BASIC_AUTH}')
     req.add_header('X-Requested-With', 'qualys-mcp')
     try:
-        with urlopen(req, timeout=60) as resp:
+        with urlopen(req, timeout=timeout) as resp:
             return resp.read()
     except:
         return None
@@ -381,34 +381,49 @@ def get_security_posture() -> dict:
     health = 100
     result = {'healthScore': 0, 'assets': {'total': 0, 'highRisk': 0},
               'vulns': {'critical': 0, 'high': 0}, 'containers': {'total': 0, 'atRisk': 0},
-              'cloud': {'accounts': 0, 'failedControls': 0}}
+              'cloud': {'accounts': 0, 'failedControls': 0}, 'errors': []}
 
-    assets = get_assets(500)
-    result['assets']['total'] = len(assets)
-    result['assets']['highRisk'] = len([a for a in assets if a.get('assetRiskScore', 0) >= 700])
-    if assets:
-        health -= int(result['assets']['highRisk'] / len(assets) * 50)
-
-    result['vulns']['critical'] = len(get_detections(5, 200))
-    result['vulns']['high'] = len(get_detections(4, 200))
-    if result['vulns']['critical'] > 50:
-        health -= 20
-    elif result['vulns']['critical'] > 10:
-        health -= 10
-
-    imgs = get_images(500)
-    result['containers']['total'] = len(imgs)
-    vuln_ids = {i.get('imageId') for i in get_images(100, 5)}
-    result['containers']['atRisk'] = len([c for c in get_containers(500) if c.get('imageId') in vuln_ids])
+    try:
+        assets = get_assets(100)
+        result['assets']['total'] = len(assets)
+        result['assets']['highRisk'] = len([a for a in assets if a.get('assetRiskScore', 0) >= 700])
+        if assets:
+            health -= int(result['assets']['highRisk'] / len(assets) * 50)
+    except:
+        result['errors'].append('assets')
 
-    for p in ['aws', 'azure', 'gcp']:
-        conns = get_connectors(p, 20)
-        result['cloud']['accounts'] += len(conns)
-        if conns:
-            acc = conns[0].get('awsAccountId') or conns[0].get('azureSubscriptionId') or conns[0].get('gcpProjectId')
-            if acc:
-                result['cloud']['failedControls'] += len([e for e in get_evaluations(acc, p, 500) if e.get('result') in ['FAIL', 'FAILED']])
+    try:
+        result['vulns']['critical'] = len(get_detections(5, 100))
+        result['vulns']['high'] = len(get_detections(4, 100))
+        if result['vulns']['critical'] > 50:
+            health -= 20
+        elif result['vulns']['critical'] > 10:
+            health -= 10
+    except:
+        result['errors'].append('vulns')
+
+    try:
+        imgs = get_images(100)
+        result['containers']['total'] = len(imgs)
+        vuln_ids = {i.get('imageId') for i in get_images(50, 5)}
+        result['containers']['atRisk'] = len([c for c in get_containers(100) if c.get('imageId') in vuln_ids])
+    except:
+        result['errors'].append('containers')
+
+    try:
+        for p in ['aws']:
+            conns = get_connectors(p, 10)
+            result['cloud']['accounts'] += len(conns)
+            if conns:
+                acc = conns[0].get('awsAccountId') or conns[0].get('azureSubscriptionId') or conns[0].get('gcpProjectId')
+                if acc:
+                    result['cloud']['failedControls'] += len([e for e in get_evaluations(acc, p, 100) if e.get('result') in ['FAIL', 'FAILED']])
+                break
+    except:
+        result['errors'].append('cloud')
 
+    if not result['errors']:
+        del result['errors']
     result['healthScore'] = max(0, health)
     return result
 
@@ -795,6 +810,57 @@ def get_webapp_vulns(severity: int = 4, limit: int = 50) -> dict:
     return result
 
 
+@mcp.tool()
+def debug_api(endpoint: str = "eol") -> dict:
+    """Debug API connectivity. Use endpoint='eol' to test EOL query, 'assets' for basic assets, 'auth' for auth test."""
+    result = {'endpoint': endpoint, 'gateway_url': GATEWAY_URL, 'base_url': BASE_URL}
+
+    if endpoint == 'auth':
+        token = get_bearer_token()
+        result['token_obtained'] = bool(token)
+        result['token_preview'] = token[:20] + '...' if token else None
+        return result
+
+    if endpoint == 'assets':
+        assets = get_assets(5)
+        result['count'] = len(assets)
+        result['sample'] = assets[:2] if assets else []
+        return result
+
+    if endpoint == 'eol':
+        url = f"{GATEWAY_URL}/rest/2.0/search/am/asset?pageSize=5"
+        token = get_bearer_token()
+        result['token_obtained'] = bool(token)
+
+        filter_body = json.dumps({
+            "filters": [
+                {"field": "operatingSystem.lifecycle.stage", "operator": "IN", "value": "EOL,EOL/EOS,EOS"}
+            ]
+        })
+        result['request_url'] = url
+        result['request_body'] = filter_body
+
+        req = Request(url, data=filter_body.encode(), method='POST')
+        req.add_header('Authorization', f'Bearer {token}' if token else f'Basic {BASIC_AUTH}')
+        req.add_header('Content-Type', 'application/json')
+        req.add_header('X-Requested-With', 'qualys-mcp')
+
+        try:
+            with urlopen(req, timeout=60) as resp:
+                raw = resp.read()
+                result['response_code'] = resp.status
+                result['response_length'] = len(raw)
+                data = json.loads(raw)
+                result['has_assetListData'] = 'assetListData' in data
+                result['asset_count'] = len(data.get('assetListData', {}).get('asset', []))
+                if result['asset_count'] > 0:
+                    result['sample_asset'] = data['assetListData']['asset'][0]
+        except Exception as e:
+            result['error'] = str(e)
+
+    return result
+
+
 def main():
     mcp.run()
 

qualys_mcp-2.1.3.dist-info/RECORD

@@ -1,6 +0,0 @@
-qualys_mcp.py,sha256=u7jd98XTJ0RLTyv2_gHaMN2xDrf8zo1YCWYUl3M2GIk,29645
-qualys_mcp-2.1.3.dist-info/METADATA,sha256=wltiuNxoh0_2g9C-VY_GW18El8bqk0Pb4GLBkaONDAc,3295
-qualys_mcp-2.1.3.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
-qualys_mcp-2.1.3.dist-info/entry_points.txt,sha256=Dc8X0AhJDjGaZOJ0SNpWDWjEX4sYzrYa9FZEbggX0Rs,47
-qualys_mcp-2.1.3.dist-info/licenses/LICENSE,sha256=dW3nC4AX_VbxPAgneSDR-miZPiHgAYw5JhPtdbUEt_E,1091
-qualys_mcp-2.1.3.dist-info/RECORD,,