AIBase
EN
Explore
Defectdojo
D

Defectdojo

An implementation of the DefectDojo MCP Server, providing API interaction capabilities between AI agents and vulnerability management tools
SecurityDeveloper tools#Vulnerability Management#Security Assessment#API Interaction.Python
2.5 points
8.7K
Open Site

Overview

Installation

Content Details

Alternatives

What is the DefectDojo MCP Server?

The DefectDojo MCP Server is an open - source tool that connects AI systems with DefectDojo through the MCP protocol for managing and analyzing security vulnerabilities, products, and scanning tasks.

How to use the DefectDojo MCP Server?

Users can connect to a DefectDojo instance through simple configuration and commands, and then use various API tools to manage vulnerabilities and scanning tasks.

Use Cases

Suitable for teams that need to automate vulnerability management and security testing, such as in a DevSecOps environment.

Main Features

Find Vulnerabilities
Retrieve vulnerabilities based on status, severity, and other conditions.
Create Vulnerabilities
Create new vulnerability records and associate them with specific test tasks.
Update Vulnerability Status
Change the status of vulnerabilities, such as verified, fixed, or marked as false positive.
List Products
Filter and list products by name or type.
Create Scanning Tasks
Create new scanning tasks for specified products.
Advantages
Supports multiple API tools for easy integration.
Improves the efficiency of vulnerability management.
Open - source and free to use.
Supports flexible query and filtering functions.
Limitations
Requires API credential configuration.
Has a certain dependence on the network environment.
Some advanced functions may require manual settings.

How to Use

Install the DefectDojo MCP Server
Install the server via `uvx` or `pip`.
Configure Environment Variables
Set the DefectDojo API Token and Base URL.
Call API Tools
Call the API through the MCP client, such as getting a list of vulnerabilities.

Usage Examples

Get High - Risk Vulnerabilities
Retrieve currently active high - risk vulnerabilities.
Create a New Scanning Task
Create a new scanning task for a specified product.
Update Vulnerability Status
Mark a vulnerability as verified.

Frequently Asked Questions

How to install the DefectDojo MCP Server?
What configuration parameters are required?
Does it support custom queries?

Related Resources

DefectDojo Official Documentation
DefectDojo official documentation.
GitHub Code Repository
Project code repository.
Video Tutorial
Quick - start video.

Installation

Copy the following command to your Client for configuration
{
  "mcpServers": {
    "defectdojo": {
      "command": "uvx",
      "args": ["defectdojo-mcp"],
      "env": {
        "DEFECTDOJO_API_TOKEN": "YOUR_API_TOKEN_HERE",
        "DEFECTDOJO_API_BASE": "https://your-defectdojo-instance.com"
      }
    }
  }
}

{
  "mcpServers": {
    "defectdojo": {
      "command": "defectdojo-mcp",
      "args": [],
      "env": {
        "DEFECTDOJO_API_TOKEN": "YOUR_API_TOKEN_HERE",
        "DEFECTDOJO_API_BASE": "https://your-defectdojo-instance.com"
      }
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.

Alternatives

R
Rsdoctor
Rsdoctor is a build analysis tool specifically designed for the Rspack ecosystem, fully compatible with webpack. It provides visual build analysis, multi - dimensional performance diagnosis, and intelligent optimization suggestions to help developers improve build efficiency and engineering quality.
TypeScript
7.8K
5 points
N
Next Devtools MCP
The Next.js development tools MCP server provides Next.js development tools and utilities for AI programming assistants such as Claude and Cursor, including runtime diagnostics, development automation, and document access functions.
TypeScript
8.4K
5 points
T
Testkube
Testkube is a test orchestration and execution framework for cloud-native applications, providing a unified platform to define, run, and analyze tests. It supports existing testing tools and Kubernetes infrastructure.
Go
6.2K
5 points
M
MCP Windbg
An MCP server that integrates AI models with WinDbg/CDB for analyzing Windows crash dump files and remote debugging, supporting natural language interaction to execute debugging commands.
Python
9.6K
5 points
R
Runno
Runno is a collection of JavaScript toolkits for securely running code in multiple programming languages in environments such as browsers and Node.js. It achieves sandboxed execution through WebAssembly and WASI, supports languages such as Python, Ruby, JavaScript, SQLite, C/C++, and provides integration methods such as web components and MCP servers.
TypeScript
7.5K
5 points
N
Netdata
Netdata is an open-source real-time infrastructure monitoring platform that provides second-level metric collection, visualization, machine learning-driven anomaly detection, and automated alerts. It can achieve full-stack monitoring without complex configuration.
Go
9.7K
5 points
M
MCP Server
The Mapbox MCP Server is a model context protocol server implemented in Node.js, providing AI applications with access to Mapbox geospatial APIs, including functions such as geocoding, point - of - interest search, route planning, isochrone analysis, and static map generation.
TypeScript
7.7K
4 points
U
Uniprof
Uniprof is a tool that simplifies CPU performance analysis. It supports multiple programming languages and runtimes, does not require code modification or additional dependencies, and can perform one-click performance profiling and hotspot analysis through Docker containers or the host mode.
TypeScript
8.3K
4.5 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
18.9K
4.5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
21.7K
4.3 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
31.3K
5 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
62.2K
4.3 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
27.0K
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
58.7K
4.5 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
19.9K
4.5 points
C
Context7
Context7 MCP is a service that provides real-time, version-specific documentation and code examples for AI programming assistants. It is directly integrated into prompts through the Model Context Protocol to solve the problem of LLMs using outdated information.
TypeScript
85.5K
4.7 points
AIBase
Zhiqi Future, Your AI Solution Think Tank
English简体中文繁體中文にほんご
© 2026AIBase