Configuration

Configure your Qualys MCP Server with POD-based URL derivation, environment variables, and SSL settings.

POD Configuration

Set the QUALYS_POD environment variable to your Qualys platform POD. The server automatically derives the correct BASE_URL and GATEWAY_URL from the POD name, so you don't need to look up or remember API endpoint URLs.

Supported PODs

POD	BASE_URL	GATEWAY_URL
`US1`	qualysapi.qualys.com	gateway.qg1.apps.qualys.com
`US2`	qualysapi.qg2.apps.qualys.com	gateway.qg2.apps.qualys.com
`US3`	qualysapi.qg3.apps.qualys.com	gateway.qg3.apps.qualys.com
`US4`	qualysapi.qg4.apps.qualys.com	gateway.qg4.apps.qualys.com
`EU1`	qualysapi.qualys.eu	gateway.qg1.apps.qualys.eu
`EU2`	qualysapi.qg2.apps.qualys.eu	gateway.qg2.apps.qualys.eu
`EU3`	qualysapi.qg3.apps.qualys.eu	gateway.qg3.apps.qualys.eu
`IN1`	qualysapi.qg1.apps.qualys.in	gateway.qg1.apps.qualys.in
`CA1`	qualysapi.qg1.apps.qualys.ca	gateway.qg1.apps.qualys.ca
`AE1`	qualysapi.qg1.apps.qualys.ae	gateway.qg1.apps.qualys.ae
`UK1`	qualysapi.qg1.apps.qualys.co.uk	gateway.qg1.apps.qualys.co.uk
`AU1`	qualysapi.qg1.apps.qualys.com.au	gateway.qg1.apps.qualys.com.au
`KSA1`	qualysapi.qg1.apps.qualys.sa	gateway.qg1.apps.qualys.sa

Environment Variables

Variable	Required	Description
`QUALYS_USERNAME`	Yes	Qualys API username
`QUALYS_PASSWORD`	Yes	Qualys API password
`QUALYS_POD`	Yes*	Platform POD (e.g., `US2`, `EU1`)
`QUALYS_BASE_URL`	No	Override the auto-derived base URL
`QUALYS_GATEWAY_URL`	No	Override the auto-derived gateway URL
`QUALYS_SSL_VERIFY`	No	Set to `"false"` to disable SSL certificate verification for self-signed certs

*Either QUALYS_POD or both QUALYS_BASE_URL and QUALYS_GATEWAY_URL are required.

Claude Desktop Configuration

Add the following to your Claude Desktop config file at ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "qualys": {
      "command": "uvx",
      "args": ["qualys-mcp"],
      "env": {
        "QUALYS_USERNAME": "your-username",
        "QUALYS_PASSWORD": "your-password",
        "QUALYS_POD": "US2"
      }
    }
  }
}

Restart Claude Desktop after saving the file. The MCP server will start automatically when Claude needs to use a Qualys tool.

Self-Signed Certificates

For environments with SSL inspection proxies or self-signed certificates, you can disable SSL verification by adding QUALYS_SSL_VERIFY to your configuration:

{
  "mcpServers": {
    "qualys": {
      "command": "uvx",
      "args": ["qualys-mcp"],
      "env": {
        "QUALYS_USERNAME": "your-username",
        "QUALYS_PASSWORD": "your-password",
        "QUALYS_POD": "US2",
        "QUALYS_SSL_VERIFY": "false"
      }
    }
  }
}

Security Warning

Disabling SSL verification removes protection against man-in-the-middle attacks. Only use this setting in trusted network environments where SSL inspection is performed by a known corporate proxy. Never disable SSL verification in production or over untrusted networks.

Advanced: Manual URL Override

If your environment requires specific API endpoint URLs, you can set QUALYS_BASE_URL and QUALYS_GATEWAY_URL directly. When these variables are set, they take priority over the QUALYS_POD value.

{
  "mcpServers": {
    "qualys": {
      "command": "uvx",
      "args": ["qualys-mcp"],
      "env": {
        "QUALYS_USERNAME": "your-username",
        "QUALYS_PASSWORD": "your-password",
        "QUALYS_BASE_URL": "qualysapi.qg2.apps.qualys.com",
        "QUALYS_GATEWAY_URL": "gateway.qg2.apps.qualys.com"
      }
    }
  }
}

Tip

Most users should use QUALYS_POD instead of manual URL overrides. The POD-based configuration is simpler and less error-prone. Use manual overrides only if your Qualys deployment uses non-standard URLs.

← Previous Installation Next → Tools Overview