# Nucleus Security

**Canonical:** https://apis.io/providers/nucleus-security/  
**Website:** https://nucleussec.com/  
**APIs profiled:** 2

Nucleus Security is a risk-based vulnerability and exposure management platform that unifies findings from across an organization's scanning estate - network, application, cloud, container and penetration-test tooling - into a single normalized view, then prioritizes and automates remediation against it. The platform ingests from roughly thirty first-party connectors (Tenable, Qualys, Rapid7, Snyk, Checkmarx, Crowdstrike, Orca, Prisma and others), enriches findings with threat intelligence including CISA KEV, EPSS, CVSS v3/v4 and Nucleus Insights exploitation signals, and drives remediation through ServiceNow, Jira and other ticketing systems. Programmatic access is a first-class deployment model: every platform capability is exposed through an API-key-authenticated REST API documented in-console with Swagger, and Nucleus ships a hosted Model Context Protocol server so AI clients can query Nucleus data under the same RBAC and Asset Group Access Control enforced in the UI. Nucleus also publishes an open, unauthenticated vulnerability intelligence API on its corporate domain, and a FedRAMP Moderate government offering, NucleusGov.

## Kin Score — 36.2 / 100 (thin)

Scored 2026-09-01 under rubric 0.17.2. Trend: flat (+0.0 from 36.2).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 13.1 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 28.9 |
| Developer Ergonomics | 49.4 |
| Commercial Clarity | 47.4 |
| Access Clarity | 47.4 |

## Agent readiness — 40.0 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | served |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | served |
| Protected Resource Metadata | verified |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## APIs (3)

- **Nucleus Security Platform REST API** — The Nucleus platform API. Every platform capability is exposed over REST, documented with Swagger inside the authenticated customer console, and authenticated with a static API ...
- **Nucleus MCP Server** — Hosted remote Model Context Protocol server included with the Nucleus platform, reachable at a per-tenant URL. Exposes project, asset, finding/vulnerability and Nucleus Query La...
- **Nucleus Security Vulnerabilities API** — Enriched CVE records from the Nucleus Security public vulnerability intelligence dataset.

## MCP servers (1)

- **Nucleus Security MCP Servers** — Nucleus Security operates TWO distinct, real, remote Model Context Protocol servers. The product server is a documented per-tenant endpoint on the customer's own Nucleus instanc...

## Security (4)

- **Nucleus Security Authentication** — 0 schemes
- **Nucleus Security Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Nucleus Security Vulnerability Disclosure** — Hackerone · contact published
- **Nucleus Security Trust Center** — SOC 2 Type II, FedRAMP Moderate, NIST CSF, CISA Secure by Design Pledge

## Plans (1)

- **Nucleus Security Plans Pricing**

## Tags

Company, Security, Cybersecurity, Vulnerability Management, Exposure Management, Risk Management, Threat Intelligence, Compliance, DevSecOps, MCP

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/nucleus-security/). Scores are computed from the provider's own public artifacts under a published rubric.