DefectDojo

Local install

io.github.DefectDojo/defectdojo-mcpv0.1.0 GitHub verified

Search, triage and import findings in DefectDojo through its REST API v2.

Security

Watch Source Website

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-11T00:41:37.9456Z",
      "publishedAt": "2026-11-11T00:41:37.9456Z",
      "statusChangedAt": "2026-11-11T00:41:37.9456Z"
    }
  },
  "server": {
    "name": "io.github.DefectDojo/defectdojo-mcp",
    "title": "DefectDojo",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.1.0",
    "packages": [
      {
        "version": "0.1.0",
        "transport": {
          "type": "stdio"
        },
        "identifier": "defectdojo-mcp-server",
        "runtimeHint": "uvx",
        "registryType": "pypi",
        "registryBaseUrl": "https://pypi.org",
        "environmentVariables": [
          {
            "name": "DEFECTDOJO_URL",
            "format": "string",
            "isRequired": true,
            "description": "Base URL of your DefectDojo instance, for example https://defectdojo.example.com"
          },
          {
            "name": "DEFECTDOJO_API_KEY",
            "format": "string",
            "isSecret": true,
            "isRequired": true,
            "description": "DefectDojo API v2 key"
          },
          {
            "name": "DEFECTDOJO_ALLOW_WRITES",
            "format": "boolean",
            "default": "false",
            "description": "Set to true to enable write tools. Read-only by default."
          },
          {
            "name": "DEFECTDOJO_VERIFY_SSL",
            "format": "string",
            "default": "true",
            "description": "true, false, or a path to a CA bundle"
          },
          {
            "name": "DEFECTDOJO_IMPORT_DIRS",
            "format": "filepath",
            "description": "Folders that scan reports may be read from for imports"
          }
        ]
      },
      {
        "transport": {
          "type": "stdio"
        },
        "identifier": "ghcr.io/defectdojo/defectdojo-mcp:0.1.0",
        "registryType": "oci",
        "environmentVariables": [
          {
            "name": "DEFECTDOJO_URL",
            "format": "string",
            "isRequired": true,
            "description": "Base URL of your DefectDojo instance, for example https://defectdojo.example.com"
          },
          {
            "name": "DEFECTDOJO_API_KEY",
            "format": "string",
            "isSecret": true,
            "isRequired": true,
            "description": "DefectDojo API v2 key"
          },
          {
            "name": "DEFECTDOJO_ALLOW_WRITES",
            "format": "boolean",
            "default": "false",
            "description": "Set to true to enable write tools. Read-only by default."
          },
          {
            "name": "DEFECTDOJO_VERIFY_SSL",
            "format": "string",
            "default": "true",
            "description": "true, false, or a path to a CA bundle"
          },
          {
            "name": "DEFECTDOJO_IMPORT_DIRS",
            "format": "filepath",
            "description": "Folders that scan reports may be read from for imports"
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/DefectDojo/defectdojo-mcp",
      "source": "github"
    },
    "websiteUrl": "https://github.com/DefectDojo/defectdojo-mcp",
    "description": "Search, triage and import findings in DefectDojo through its REST API v2."
  }
}

Maintain this server? Claim it

Try it

This server only runs locally, from a package. Install it with the instructions on this page to try it.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM StudioThen replace the YOUR_ values and {placeholders} with your own.

Run in a terminal

claude mcp add defectdojo-mcp \
  -e DEFECTDOJO_URL=YOUR_DEFECTDOJO_URL \
  -e DEFECTDOJO_API_KEY=YOUR_DEFECTDOJO_API_KEY \
  -- uvx defectdojo-mcp-server==0.1.0

Environment

DEFECTDOJO_URL (required): Base URL of your DefectDojo instance, for example https://defectdojo.example.com
DEFECTDOJO_API_KEY (required): DefectDojo API v2 key
DEFECTDOJO_ALLOW_WRITES (optional, not in the config above): Set to true to enable write tools. Read-only by default.
DEFECTDOJO_VERIFY_SSL (optional, not in the config above): true, false, or a path to a CA bundle
DEFECTDOJO_IMPORT_DIRS (optional, not in the config above): Folders that scan reports may be read from for imports

Tools

We don't run packages, so we can't list this server's tools.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM StudioThen replace the YOUR_ values and {placeholders} with your own.

Run in a terminal

claude mcp add defectdojo-mcp \
  -e DEFECTDOJO_URL=YOUR_DEFECTDOJO_URL \
  -e DEFECTDOJO_API_KEY=YOUR_DEFECTDOJO_API_KEY \
  -- uvx defectdojo-mcp-server==0.1.0

Environment

DEFECTDOJO_URL (required): Base URL of your DefectDojo instance, for example https://defectdojo.example.com
DEFECTDOJO_API_KEY (required): DefectDojo API v2 key
DEFECTDOJO_ALLOW_WRITES (optional, not in the config above): Set to true to enable write tools. Read-only by default.
DEFECTDOJO_VERIFY_SSL (optional, not in the config above): true, false, or a path to a CA bundle
DEFECTDOJO_IMPORT_DIRS (optional, not in the config above): Folders that scan reports may be read from for imports

Try it

Install

Tools

Try it

Install

Tools

How it ranks