DefectDojo

Indexed by io.github.inspicere

About

MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding

Use this server

Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.

Transportstdio (runs a local command)

Env varsDEFECTDOJO_URL DEFECTDOJO_API_KEY DEFECTDOJO_READ_API_KEY DEFECTDOJO_WRITE_API_KEY MCP_AUTH_TOKEN AUDIT_HMAC_KEY

Claude Code

claude mcp add --env DEFECTDOJO_URL= --env DEFECTDOJO_API_KEY= --env DEFECTDOJO_READ_API_KEY= --env DEFECTDOJO_WRITE_API_KEY= --env MCP_AUTH_TOKEN= --env AUDIT_HMAC_KEY= mcp-defectdojo -- uvx mcp-defectdojo

Cursor

Add to Cursor

If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.

VS Code

code --add-mcp '{"name":"mcp-defectdojo","command":"uvx","args":["mcp-defectdojo"],"env":{"DEFECTDOJO_URL":"","DEFECTDOJO_API_KEY":"","DEFECTDOJO_READ_API_KEY":"","DEFECTDOJO_WRITE_API_KEY":"","MCP_AUTH_TOKEN":"","AUDIT_HMAC_KEY":""}}'

JSON

{
  "mcpServers": {
    "mcp-defectdojo": {
      "command": "uvx",
      "args": [
        "mcp-defectdojo"
      ],
      "env": {
        "DEFECTDOJO_URL": "",
        "DEFECTDOJO_API_KEY": "",
        "DEFECTDOJO_READ_API_KEY": "",
        "DEFECTDOJO_WRITE_API_KEY": "",
        "MCP_AUTH_TOKEN": "",
        "AUDIT_HMAC_KEY": ""
      }
    }
  }
}

Environment variables are listed by name only — fill in your own values. Entries never carry secrets.