Conviso MCP Server

Get a single application by id, including its linked assets.

List applications for a company (id, name, url, riskScore, assetsCount), with optional name search.

Fetch information about a specific asset by its ID.

Get scan coverage counts for a company (assets with scans, without scans, and which scans are considered).

Return a paginated list of assets for a company, with rich filtering and sorting.

Return a paginated list of companies accessible with the provided API key. Use `search` to filter by company name.

Retrieve detailed information about a specific company, including plan, integrations, and branding metadata.

Fetch detailed technical data for a specific vulnerability/issue. Optionally include raw request/response and vulnerable code snippets.

List vulnerabilities for a company with rich filtering (project, asset, severity, status, SLA, dates, assignee) and sorting.

Get Mean Time To Resolution (MTTR) aggregated over a date range. Supports filtering by severities, statuses, and assets.

Retrieve historical overall risk scores for a company, useful for trend analysis and reporting.

Get a single AI-Pentest artifact by id, including scope and its executions.

List AI-Pentest artifacts for a company (label, type, scheduling, latest execution).

Get the result/status of a single AI-Pentest execution by id (status, vulnerability count, severity breakdown, retest progress).

Retrieve detailed metadata for a specific project by its ID.

List the requirements/checklists attached to a specific project and discover the project_requirement_id used to retrieve activities.

List the available project statuses (id, label, isInitial).

List the available project types (id, code, label) — source of the type_id required by create_project.

Return a paginated list of security projects for a company, with filtering and sorting.

Get a single requirement/checklist by id.

List security requirements/checklists (playbooks) for a company, searchable by label — source of the requirement_ids used by create_project.

List SBOM / supply-chain components for a company (name, version, technology, package manager, license, issues by severity).

List scan execution histories for a company (status, integration, durations, vulnerability counts).

Get a single Threat Modeling artifact by id, including its versions (diagrams, notes, scope).

List Threat Modeling artifacts for a company (label, scope, latest version).

Get a single ticket by id, including status, priority, impact and assignee.

List tickets for a company (paginated), with optional search and TicketSearch params.

Utility tool returning the current day, month and year.

Return a summary of vulnerability counts grouped by severity for a given company (risk overview).

Discover the available write operations (name, description, category, destructive flag). Step 1 of the write workflow.

Curated shortcut: start a Conviso DAST scan on an asset.

Curated shortcut: trigger an AI-Pentest execution from an existing pentest artifact.