MCP Server

Maintained

MIT

DefectDojo MCP Server

io.github.inspicere/mcp-defectdojo

Repository Registry

What is the DefectDojo MCP server?

MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding

How to install DefectDojo

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

DEFECTDOJO_URL
required
Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true)
DEFECTDOJO_API_KEY
required
secret
API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode.
DEFECTDOJO_READ_API_KEY
secret
Optional read-only API key (used for GET requests in dual-key mode)
DEFECTDOJO_WRITE_API_KEY
secret
Optional write API key (used for POST/PATCH in dual-key mode)
MCP_AUTH_TOKEN
secret
Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_<NAME>=<token>:<role> for RBAC)
AUDIT_HMAC_KEY
secret
HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))'

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-defectdojo": {
      "command": "uvx",
      "args": [
        "mcp-defectdojo"
      ],
      "env": {
        "DEFECTDOJO_URL": "<YOUR_DEFECTDOJO_URL>",
        "DEFECTDOJO_API_KEY": "<YOUR_DEFECTDOJO_API_KEY>",
        "DEFECTDOJO_READ_API_KEY": "<YOUR_DEFECTDOJO_READ_API_KEY>",
        "DEFECTDOJO_WRITE_API_KEY": "<YOUR_DEFECTDOJO_WRITE_API_KEY>",
        "MCP_AUTH_TOKEN": "<YOUR_MCP_AUTH_TOKEN>",
        "AUDIT_HMAC_KEY": "<YOUR_AUDIT_HMAC_KEY>"
      }
    }
  }
}

Related MCP servers

Rootr

Maintained

Connect your team's living knowledge base — docs, data, issues, CRM — to Claude and ChatGPT.

JavaScript

View repository →

INSSIST

Active

Drive your own logged-in Instagram session via the INSSIST extension: read, publish, DMs, analytics.

TypeScript

MIT

View repository →

io.github.instagitai/instagit

Maintained

AI-powered Git repository analysis for coding agents — understand any codebase instantly with ground truth.

TypeScript

MIT

View repository →

RankCLI

Active

Free, local SEO + GEO audits for AI assistants - no signup, nothing leaves your machine.

TypeScript

MIT

View repository →

io.github.integsec/turbopentest

Maintained

AI-powered penetration testing. Launch scans, review findings, download reports.

TypeScript

MIT

View repository →

io.github.intelli-verse-x/router-mcp

Active

Run the Intelliverse platform from any agent: apps, API keys, knowledge bases, email, media, chat.

JavaScript

View repository →