D

Defectdojo

An implementation of the DefectDojo MCP Server, providing API interaction capabilities between AI agents and vulnerability management tools
2.5 points
33

What is the DefectDojo MCP Server?

The DefectDojo MCP Server is an open - source tool that connects AI systems with DefectDojo through the MCP protocol for managing and analyzing security vulnerabilities, products, and scanning tasks.

How to use the DefectDojo MCP Server?

Users can connect to a DefectDojo instance through simple configuration and commands, and then use various API tools to manage vulnerabilities and scanning tasks.

Use Cases

Suitable for teams that need to automate vulnerability management and security testing, such as in a DevSecOps environment.

Main Features

Find VulnerabilitiesRetrieve vulnerabilities based on status, severity, and other conditions.
Create VulnerabilitiesCreate new vulnerability records and associate them with specific test tasks.
Update Vulnerability StatusChange the status of vulnerabilities, such as verified, fixed, or marked as false positive.
List ProductsFilter and list products by name or type.
Create Scanning TasksCreate new scanning tasks for specified products.

Advantages and Limitations

Advantages
Supports multiple API tools for easy integration.
Improves the efficiency of vulnerability management.
Open - source and free to use.
Supports flexible query and filtering functions.
Limitations
Requires API credential configuration.
Has a certain dependence on the network environment.
Some advanced functions may require manual settings.

How to Use

Install the DefectDojo MCP Server
Install the server via `uvx` or `pip`.
Configure Environment Variables
Set the DefectDojo API Token and Base URL.
Call API Tools
Call the API through the MCP client, such as getting a list of vulnerabilities.

Usage Examples

Get High - Risk VulnerabilitiesRetrieve currently active high - risk vulnerabilities.
Create a New Scanning TaskCreate a new scanning task for a specified product.
Update Vulnerability StatusMark a vulnerability as verified.

Frequently Asked Questions

How to install the DefectDojo MCP Server?
What configuration parameters are required?
Does it support custom queries?

Related Resources

DefectDojo Official Documentation
DefectDojo official documentation.
GitHub Code Repository
Project code repository.
Video Tutorial
Quick - start video.
Installation
Copy the following command to your Client for configuration
{
  "mcpServers": {
    "defectdojo": {
      "command": "uvx",
      "args": ["defectdojo-mcp"],
      "env": {
        "DEFECTDOJO_API_TOKEN": "YOUR_API_TOKEN_HERE",
        "DEFECTDOJO_API_BASE": "https://your-defectdojo-instance.com"
      }
    }
  }
}

{
  "mcpServers": {
    "defectdojo": {
      "command": "defectdojo-mcp",
      "args": [],
      "env": {
        "DEFECTDOJO_API_TOKEN": "YOUR_API_TOKEN_HERE",
        "DEFECTDOJO_API_BASE": "https://your-defectdojo-instance.com"
      }
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.
S
Search1api
The Search1API MCP Server is a server based on the Model Context Protocol (MCP), providing search and crawling functions, and supporting multiple search services and tools.
TypeScript
367
4 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
871
4.3 points
M
MCP Alchemy
Certified
MCP Alchemy is a tool that connects Claude Desktop to multiple databases, supporting SQL queries, database structure analysis, and data report generation.
Python
350
4.2 points
P
Postgresql MCP
A PostgreSQL database MCP service based on the FastMCP library, providing CRUD operations, schema inspection, and custom SQL query functions for specified tables.
Python
137
4 points
M
MCP Scan
MCP-Scan is a security scanning tool for MCP servers, used to detect common security vulnerabilities such as prompt injection, tool poisoning, and cross-domain escalation.
Python
642
5 points
A
Agentic Radar
Agentic Radar is a security scanning tool for analyzing and assessing agentic systems, helping developers, researchers, and security experts understand the workflows of agentic systems and identify potential vulnerabilities.
Python
577
5 points
C
Cloudflare
Changesets is a build tool for managing versions and releases in multi - package or single - package repositories.
TypeScript
1.5K
5 points
E
Edgeone Pages MCP Server
EdgeOne Pages MCP is a service that quickly deploys HTML content to EdgeOne Pages via the MCP protocol and obtains a public URL
TypeScript
279
4.8 points
Featured MCP Services
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
132
4.3 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
1.8K
5 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
871
4.3 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
181
4.5 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
597
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
6.7K
4.5 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
319
4.5 points
C
Context7
Context7 MCP is a service that provides real-time, version-specific documentation and code examples for AI programming assistants. It is directly integrated into prompts through the Model Context Protocol to solve the problem of LLMs using outdated information.
TypeScript
5.3K
4.7 points
AIbase
Zhiqi Future, Your AI Solution Think Tank
© 2025AIbase