OpenVAS-MCP 0.2.2

OpenVAS-MCP v0.2.2

OpenVAS-MCP v0.2.2 is the first complete release of the Rust gvm-mcp server
published through the rust-gvm release model, and the first usable one since
v0.1.0: the v0.2.0 tag was never published because its release run was stuck
on a retired macOS runner, and v0.2.1 was published without assets because the
repository's immutable-releases setting rejected the uploads. It brings the
tool surface to the rust-gvm-api 0.5.0 contract and forwards each caller's
gvmd identity instead of holding one session of its own.

Deployments upgrading from v0.1.0 should review the
installation guide
and the
authentication guide.
The container image moved to ghcr.io/greenbone-hive/openvas-mcp and is
published only under the immutable release tag, the binary archives are now
named per platform (gvm-mcp-linux-amd64.tar.gz and so on), and GVM_USERNAME
/ GVM_PASSWORD are a fallback identity that HTTP callers may replace with
their own Authorization header (--require-caller-auth enforces that).

Highlights:

• 194 tools in 25 toolsets covering 195 of the 199 operations of the
  rust-gvm-api 0.5.0 contract (gvmd 26.43.0 / GMP 22.8), with
  scripts/gateway_sync_check.py keeping the mapping in sync in CI;
• per-request identity forwarding to the gateway, job-bound sessions for
  report exports, and --require-caller-auth / --allowed-hosts hardening
  for streamable-HTTP deployments;
• restructured documentation: a short README plus separate installation,
  toolsets, authentication, usage and development guides;
• refreshed dependencies clearing the open RustSec advisories, and a config
  test that no longer writes to the shared temporary directory;
• release automation aligned with rust-gvm: a reviewed version PR, the
  pontos-driven Orchestrated Release workflow, and a tag-triggered
  Release workflow that qualifies the tag against protected main;
• release binaries for five targets (Linux amd64 glibc and musl, Linux arm64,
  macOS amd64 and arm64), each with a SHA-256 checksum;
• the Linux amd64/arm64 image at ghcr.io/greenbone-hive/openvas-mcp:v0.2.2
  (no moving latest tag);
• CycloneDX JSON and XML SBOMs, an SBOM quality report, checksums, and
  Sigstore provenance for downloadable artifacts and the container image.

The release artifacts are built from the immutable v0.2.2 tag and verified
against its exact qualified protected-main commit before publication completes.

v0.1.0

gvm-mcp v0.1.0

First release of the Rust MCP server for Greenbone Vulnerability Management,
a thin typed front end over the rust-gvm-api REST gateway.

- 104 tools across 18 toolsets (81 default, 49 read-only, +23 opt-in identity)
- stdio and streamable-HTTP transports
- distroless Docker image, cross-platform binary releases
- session lifecycle with single-flight renewal, RFC 9457 error mapping

MCP Server 2026.06.0

Docker Image

docker pull ghcr.io/clawosiris/openvas-mcp-server:2026.06.0

What's Changed

• chore: remove obsolete release workflows, add release documentation by @clawosiris in #50
• docs(journal): add 2026-03-23 by @clawosiris in #47
• chore: establish rust-migration integration branch by @clawosiris in #58

Full Changelog: v2026.03.4-mcp...v2026.06.0-mcp

CLI 2026.06.0

Docker Image

docker pull ghcr.io/clawosiris/openvas-cli:2026.06.0

What's Changed

• chore: remove obsolete release workflows, add release documentation by @clawosiris in #50
• docs(journal): add 2026-03-23 by @clawosiris in #47
• chore: establish rust-migration integration branch by @clawosiris in #58

Full Changelog: v2026.03.4-mcp...v2026.06.0-cli

openvas-mcp-server 0.3.2

0.3.2 - 2026-06-18

MCP Server 2026.03.4

Docker Image

docker pull ghcr.io/clawosiris/openvas-mcp-server:2026.03.4

What's Changed

• doc updated by @recepkizilarslan in #29
• Fix/alive test string value by @recepkizilarslan in #30
• docs: add mock server integration test spec by @clawosiris in #32
• ci: add auto-merge (squash) workflow by @clawosiris in #40
• revert: remove auto-merge workflow by @clawosiris in #41
• test: add integration tests using gvm-mock-server by @clawosiris in #33
• test: add integration tests for all remaining services by @clawosiris in #42
• ci(release): use greenbone/actions/release@v3 instead of manual pontos by @clawosiris in #46

Full Changelog: v2026.03.1-cli...v2026.03.4-mcp

CLI 2026.03.4

Docker Image

docker pull ghcr.io/clawosiris/openvas-cli:2026.03.4

What's Changed

• doc updated by @recepkizilarslan in #29
• Fix/alive test string value by @recepkizilarslan in #30
• docs: add mock server integration test spec by @clawosiris in #32
• ci: add auto-merge (squash) workflow by @clawosiris in #40
• revert: remove auto-merge workflow by @clawosiris in #41
• test: add integration tests using gvm-mock-server by @clawosiris in #33
• test: add integration tests for all remaining services by @clawosiris in #42
• ci(release): use greenbone/actions/release@v3 instead of manual pontos by @clawosiris in #46

Full Changelog: v2026.03.1-cli...v2026.03.4-cli

MCP Server 2026.03.3

Docker Image

docker pull ghcr.io/clawosiris/openvas-mcp-server:2026.03.3

What's Changed

• doc updated by @recepkizilarslan in #29
• Fix/alive test string value by @recepkizilarslan in #30
• docs: add mock server integration test spec by @clawosiris in #32
• ci: add auto-merge (squash) workflow by @clawosiris in #40
• revert: remove auto-merge workflow by @clawosiris in #41
• test: add integration tests using gvm-mock-server by @clawosiris in #33
• test: add integration tests for all remaining services by @clawosiris in #42
• ci(release): use greenbone/actions/release@v3 instead of manual pontos by @clawosiris in #46

Full Changelog: v2026.03.1-cli...v2026.03.3-mcp

CLI 2026.03.3

Docker Image

docker pull ghcr.io/clawosiris/openvas-cli:2026.03.3

What's Changed

• doc updated by @recepkizilarslan in #29
• Fix/alive test string value by @recepkizilarslan in #30
• docs: add mock server integration test spec by @clawosiris in #32
• ci: add auto-merge (squash) workflow by @clawosiris in #40
• revert: remove auto-merge workflow by @clawosiris in #41
• test: add integration tests using gvm-mock-server by @clawosiris in #33
• test: add integration tests for all remaining services by @clawosiris in #42
• ci(release): use greenbone/actions/release@v3 instead of manual pontos by @clawosiris in #46

Full Changelog: v2026.03.1-cli...v2026.03.3-cli

Release 0.3.1

Installation

MCP Server

docker pull ghcr.io/clawosiris/openvas-mcp-server:0.3.1

CLI

docker pull ghcr.io/clawosiris/openvas-cli:0.3.1

What's Changed

• ci: split release pipeline into CLI, MCP, and combined workflows by @clawosiris in #20
• test: restructure tests into unit/ and e2e/ directories by @clawosiris in #21
• fix: Click 8.2+ compatibility and version sync by @clawosiris in #22
• fix(ci): add missing permissions to release workflows by @clawosiris in #23
• chore: change license from MIT to AGPL-3.0 by @clawosiris in #24
• fix(mcp): remove future annotations from toolset files by @clawosiris in #25
• fix: use determine_supported_gmp() for versioned GMP protocol by @clawosiris in #26
• perf: disable structuredContent to reduce token consumption by @clawosiris in #27
• CLI dockerized by @recepkizilarslan in #28
• doc updated by @recepkizilarslan in #29
• Fix/alive test string value by @recepkizilarslan in #30
• docs: add mock server integration test spec by @clawosiris in #32
• ci: add auto-merge (squash) workflow by @clawosiris in #40
• revert: remove auto-merge workflow by @clawosiris in #41
• test: add integration tests using gvm-mock-server by @clawosiris in #33
• test: add integration tests for all remaining services by @clawosiris in #42
• ci(release): use greenbone/actions/release@v3 instead of manual pontos by @clawosiris in #46

New Contributors

• @recepkizilarslan made their first contribution in #28

Full Changelog: v2026.03.3...v0.3.1