Developer Tools · Security

DefectDojo logo

DefectDojo

jamiesonio/defectdojo-mcp

This project provides a Model Context Protocol (MCP) server implementation for DefectDojo, a popular open-source vulnerability management tool. It allows AI agents and other MCP clients to interact with the DefectDojo API programmatically.

Install

uvx defectdojo-mcp

Client configuration

{
  "mcpServers": {
    "defectdojo": {
      "command": "uvx",
      "args": [
        "defectdojo-mcp"
      ],
      "env": {
        "DEFECTDOJO_API_TOKEN": "<DEFECTDOJO_API_TOKEN>",
        "DEFECTDOJO_API_BASE": "<DEFECTDOJO_API_BASE>"
      }
    }
  }
}

Environment variables

DEFECTDOJO_API_TOKENDEFECTDOJO_API_BASE
GitHub stars
2
Category
Developer Tools, Security
License
MIT
Updated
Oct 6, 2026

Features

  • Findings: Fetch, search, create, update status, and add notes.

  • Products: List available products.

  • Engagements: List, retrieve details, create, update, and close engagements.

Tools (9)

  • get_findings

    Retrieve findings with filtering (product_name, status, severity) and pagination (limit, offset).

  • search_findings

    Search findings using a text query, with filtering and pagination.

  • update_finding_status

    Change the status of a specific finding (e.g., Active, Verified, False Positive).

  • add_finding_note

    Add a textual note to a finding.

  • create_finding

    Create a new finding associated with a test.

  • get_engagement

    Get details for a specific engagement by its ID.

  • create_engagement

    Create a new engagement for a product.

  • update_engagement

    Modify details of an existing engagement.

  • close_engagement

    Mark an engagement as completed.

Details on this page are taken from the project's README. Open README

Related MCP servers

More servers
Playwright logo

Playwright

microsoft/playwright

72.2k

Playwright is a framework for web automation and testing. It drives Chromium, Firefox, and WebKit with a single API — in your tests, in your scripts, and as a tool for AI agents.

Developer Tools
repomix logo

repomix

yamadashy/repomix

15.2k

Repomix is a tool that packs a codebase into an AI-friendly format, supporting local and remote repository processing and providing code compression, security checks and multiple output formats.

Developer Tools
UI-TARS-desktop logo

UI-TARS-desktop

bytedance/UI-TARS-desktop

12.9k

TARS is ByteDance's multimodal AI agent stack, shipping two projects: Agent TARS (a CLI and Web UI agent built on MCP) and UI-TARS-desktop (a desktop GUI agent).

Developer Tools
blender logo

blender

ahujasid/blender-mcp

10.6k

formerly blender-mcp — the PyPI package is now mcp-for-blender. Existing setups keep working; no config change is required. Read more.

Developer Tools
Playwright Browser Automation logo

Playwright Browser Automation

microsoft/playwright-mcp

9.2k

A Model Context Protocol (MCP) server that provides browser automation capabilities using Playwright. This server enables LLMs to interact with web pages through structured accessibility snapshots, bypassing the need for screenshots or visually-tuned models.

Developer Tools
2344 logo

2344

comet-ml/opik

7k

Opik is the open-source LLM observability and evaluation platform for AI agent tracing, LLM evaluation, prompt management, and production monitoring. Built by Comet. Apache-2.0 licensed, free to self-host the full platform, with 20,000+ GitHub stars.

Developer Tools