Back to Browse

Defectdojo Community MCP Server

Developer ToolsModerate6.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Read-only MCP server for DefectDojo Community Edition: triage findings, grouped across products.

About

Read-only MCP server for DefectDojo Community Edition: triage findings, grouped across products.

Security Report

6.2
Moderate6.2Moderate Risk

This is a clean, read-only MCP server for DefectDojo Community Edition that authenticates via a required API token read from environment variables, uses only GET requests, and never logs or hardcodes the token. Permissions (network_http to the user-configured DefectDojo URL, env_vars for configuration) match its stated purpose, and no malicious or dangerous patterns were found. Minor observations are limited to optional TLS disabling and the lack of a dedicated read-only check on the token beyond documentation. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

12 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

Base URL of your DefectDojo instance, e.g. https://defectdojo.example.com (no trailing /api/v2).Optional

Environment variable: DEFECTDOJO_URL

DefectDojo API v2 token. Use a dedicated read-only user: this server never needs write access.Required

Environment variable: DEFECTDOJO_API_KEY

Set to false to skip TLS certificate verification. Discouraged; see SECURITY.md.Optional

Environment variable: DEFECTDOJO_VERIFY_TLS

Per-request HTTP timeout in seconds. Defaults to 30.Optional

Environment variable: DEFECTDOJO_TIMEOUT_SECONDS

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-systechgd-defectdojo-community-mcp": {
      "env": {
        "DEFECTDOJO_URL": "your-defectdojo-url-here",
        "DEFECTDOJO_API_KEY": "your-defectdojo-api-key-here",
        "DEFECTDOJO_VERIFY_TLS": "your-defectdojo-verify-tls-here",
        "DEFECTDOJO_TIMEOUT_SECONDS": "your-defectdojo-timeout-seconds-here"
      },
      "args": [
        "defectdojo-community-mcp"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!