defectdojo-mcp
If you are the rightful owner of defectdojo-mcp and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.
DefectDojo MCP Server is a Model Context Protocol server implementation for DefectDojo, enabling AI agents and MCP clients to interact with the DefectDojo API programmatically.
The DefectDojo MCP Server provides a Model Context Protocol (MCP) server implementation for DefectDojo, a widely-used open-source vulnerability management tool. This server allows AI agents and other MCP clients to programmatically interact with the DefectDojo API, facilitating the management of key entities such as findings, products, and engagements. The server can be run using 'uvx' for automatic dependency management or installed via 'pip'. Configuration requires setting environment variables for API authentication. The server supports various operations like fetching, searching, and updating findings, listing products, and managing engagements, making it a versatile tool for vulnerability management automation.
Features
- Findings management: Fetch, search, create, update status, and add notes.
- Products management: List available products.
- Engagements management: List, retrieve details, create, update, and close engagements.
Tools
get_findings
Get finds, support for filtering and pagination
search_findings
Search for findings using text query
update_finding_status
Update the status of finding
add_finding_note
Add notes for finding
create_finding
Create a new finding
list_products
List products, support filtering and pagination
list_engagements
List engagements, support filtering and pagination
get_engagement
Get details for a specific engagement
create_engagement
Create a new engagement for the product
update_engagement
Update details of existing engagement
close_engagement
Tag engagement as completed
