mcpindex.aiv0
← Index

DefectDojo

io.github.inspicere/mcp-defectdojo·v3.3.2·Other
Quality Score
90
/100

MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding

Repository →
§00  Trust verdict · v1 advisory ·  method
UNVERIFIEDno verdict on file

Verdict not yet evaluated for this tool. The hybrid eval runs adversarial cases first; coverage rolls out as the corpus expands. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: hybrid eval, four-state verdict, honest limits.

§01  Install
Claude Desktop (uvx)
{
  "mcpServers": {
    "mcp-defectdojo": {
      "command": "uvx",
      "args": [
        "mcp-defectdojo"
      ],
      "env": {
        "DEFECTDOJO_URL": "<defectdojo_url>",
        "DEFECTDOJO_API_KEY": "<your-defectdojo_api_key>",
        "DEFECTDOJO_READ_API_KEY": "<your-defectdojo_read_api_key>",
        "DEFECTDOJO_WRITE_API_KEY": "<your-defectdojo_write_api_key>",
        "MCP_AUTH_TOKEN": "<your-mcp_auth_token>",
        "AUDIT_HMAC_KEY": "<your-audit_hmac_key>"
      }
    }
  }
}
§02  Environment variables
DEFECTDOJO_URL
required

Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true)

DEFECTDOJO_API_KEY
requiredsecret

API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode.

DEFECTDOJO_READ_API_KEY
secret

Optional read-only API key (used for GET requests in dual-key mode)

DEFECTDOJO_WRITE_API_KEY
secret

Optional write API key (used for POST/PATCH in dual-key mode)

MCP_AUTH_TOKEN
secret

Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_<NAME>=<token>:<role> for RBAC)

AUDIT_HMAC_KEY
secret

HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))'

§03  MCP Quality Score  ·  methodology
freshness
25
completeness
15
installability
25
documentation
15
stability
10
§04  Alternatives in Other
agency.lona/trading
agency.lona/trading

AI-powered trading strategy development: backtesting, market data, and portfolio analysis

ABMeter
ai.abmeter/abmeter

Feature flagging and A/B testing platform with AI-first experimentation workflows.

AdAdvisor MCP Server
ai.adadvisor/mcp-server

Query Meta Ads performance data — accounts, campaigns, ad sets, ads, metrics & settings.