Welcome
MCP Server for Vulnerability Remediation
Learn how to install, configure, secure, operate, and troubleshoot the MCP Server for Vulnerability Remediation, which connects compatible Model Context Protocol (MCP) clients to patch intelligence services and produces BigFix Fixlet content.
Using the server
The MCP Server for Vulnerability Remediation exposes a streamable HTTP MCP endpoint and requires a BigFix REST API bearer token on every client request.
Reviewing generated content
Review a generated Fixlet before you import or deploy it.

BigFix Documentation Homepage
BigFix Platform
Patch Documentation
Insights Documentation
The Insights feature of BigFix 11 provides you with advanced analytics and visualizations that you can use to identify risks in your environment and make appropriate business decisions.
CVE Search dashboard and Web Report
BigFix CVE Search dashboard and Web Report are available as part of a new Vulnerability Reporting site.
CyberFOCUS Analytics dashboard
From the BigFix CyberFOCUS Analytics dashboard, you can view various reports that display critical information related to vulnerabilities. The data are represented in the form of graphs and tables, so that the user can quickly become aware of the IT assets and the threats in the environment and take informed decisions to mitigate vulnerabilities.
ServiceNow Data Flow
This module provides an overview and features of BigFix ServiceNow Data Flow.
BigFix Insights for Vulnerability Remediation (IVR)
Welcome to the BigFix Insights for Vulnerability Remediation (IVR) documentation, where you can find information about how to install, maintain and use IVR service.
Extended third-party Windows Applications
Updates for Windows Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Extended third-party Mac Applications
Updates for Mac Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Extended third-party NIX Applications
Updates for NIX Applications Extended provides an automated, standardized process of managing software updates and packages in the BigFix environment. This provides updates for a wide range of third-party software packages.
Software Installer Library Dashboard for Windows
Learn how to use the Software Install Dashboard for deploying applications on Windows endpoints.
MCP Server for Vulnerability Remediation
Learn how to install, configure, secure, operate, and troubleshoot the MCP Server for Vulnerability Remediation, which connects compatible Model Context Protocol (MCP) clients to patch intelligence services and produces BigFix Fixlet content.
- Introduction
  The MCP Server for Vulnerability Remediation enables compatible AI clients to discover security patch information and generate BigFix Fixlet XML through the Model Context Protocol (MCP).
- Supported scenarios
  The MCP Server for Vulnerability Remediation supports CVE patch discovery, vendor patch file discovery, and Fixlet generation for a defined set of update flows.
- Security architecture
  The MCP Server for Vulnerability Remediation is a standalone service with separate trust boundaries for MCP clients, the BigFix Server, and external patch intelligence providers.
- Requirements
  Verify the following requirements before you install the MCP Server for Vulnerability Remediation.
- Installing the server
  Use the Windows AMD64 release package to install the MCP Server for Vulnerability Remediation as a Windows service.
- Using the server
  The MCP Server for Vulnerability Remediation exposes a streamable HTTP MCP endpoint and requires a BigFix REST API bearer token on every client request.
  - Configuring Visual Studio Code
    Configure Visual Studio Code to connect to the MCP Server for Vulnerability Remediation over the streamable HTTP MCP endpoint.
  - Configuring Claude Desktop
    Configure Claude Desktop to connect to the MCP Server for Vulnerability Remediation through an HTTP-to-stdio bridge.
  - Configuring ChatGPT Desktop
    Configure ChatGPT Desktop to connect to the BES MCP Fixlet Generator when the client supports remote streamable HTTP MCP servers.
  - Standard workflow
    Use the standard workflow to retrieve CVE patch data, retrieve patch files, and generate a Fixlet.
  - Reviewing generated content
    Review a generated Fixlet before you import or deploy it.
- Tool reference
  The server exposes three MCP tools. The input schemas are discoverable through MCP and are summarized here for operational review.
- Troubleshooting
  Use the operational log configured by log.file_path, the workspace mcp_audit.log, and the MCP client's output log when you diagnose a problem.
- Uninstalling the server
  Uninstalling the service does not replace data-retention decisions. Back up required logs and any Fixlets exported through the client workflow before you delete the installation or workspace.
Remediate Guides in PDF
Following is a link to the BigFix Remediate user guide in PDF format:

Reviewing generated content

Review a generated Fixlet before you import or deploy it.

Before you import or deploy a generated Fixlet, review:

The selected product, architecture, CVE, KB article, and fixed version.
Relevance expressions and applicability boundaries.
Download URL, filename, size, SHA-1, and SHA-256 metadata.
Installation commands, arguments, exit-code handling, and restart behavior.
Prerequisite and checkpoint sequencing.
Vendor warnings and verification statements.

The server generates content but does not import, approve, or deploy it.

For exact inputs, see the Tool reference.