DefectDojo

by inspicereio.github.inspicere/mcp-defectdojov3.3.2

MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding

  • Runs on your machine
  • No known advisories
  • MIT

Version checks

  • Available on PyPI, latest 3.3.2 · checked

Not run yet – package checks are being switched on. It runs from a package on your machine, so instead of uptime we will start each new version in our sandbox.

How we check

Run it on your machine

Add to mcp.json (Program › Install › Edit mcp.json):

{
  "mcpServers": {
    "mcp-defectdojo": {
      "command": "uvx",
      "args": ["mcp-defectdojo==3.3.2"],
      "env": { "DEFECTDOJO_URL": "YOUR_DEFECTDOJO_URL", "DEFECTDOJO_API_KEY": "YOUR_DEFECTDOJO_API_KEY" }
    }
  }
}

Replace YOUR_DEFECTDOJO_URL,YOUR_DEFECTDOJO_API_KEY with your own values.

For agents: the install prompt

Every step above as one Markdown text, for an assistant installing it for you.

# Install the MCP server DefectDojo (`io.github.inspicere/mcp-defectdojo`)

Its page: https://plug.directory/servers/io.github.inspicere/mcp-defectdojo

It runs on the person's machine and needs uv installed.

Ask the person for `YOUR_DEFECTDOJO_URL`, `YOUR_DEFECTDOJO_API_KEY` and put it in place of the placeholder; never invent a value.

Use the section for the person's client.

## Claude Desktop, Cursor, Devin Desktop, Cline, LM Studio, Gemini CLI, mcp-client-cli, oterm, TUUI, BoltAI, AnythingLLM, Augment Code, Bob Shell, ECA, Kiro, Kiro CLI

Merge into the place for the person's client:

- Claude Desktop: claude_desktop_config.json (Settings › Developer › Edit Config)
- Cursor: ~/.cursor/mcp.json
- Devin Desktop: ~/.config/devin/mcp_config.json
- Cline: cline_mcp_settings.json (MCP Servers › Configure › Configure MCP Servers)
- LM Studio: mcp.json (Program › Install › Edit mcp.json)
- Gemini CLI: ~/.gemini/settings.json
- mcp-client-cli: ~/.llm/config.json
- oterm: config.json in oterm's data folder (~/Library/Application Support/oterm on macOS, ~/.local/share/oterm on Linux, %APPDATA%\oterm on Windows)
- TUUI: resources/assets/config/mcp.json in the installed app
- BoltAI: ~/.boltai/mcp.json
- AnythingLLM: anythingllm_mcp_servers.json in the AnythingLLM storage plugins directory
- Augment Code: Augment Settings Panel – MCP section – Import from JSON (VS Code extension)
- Bob Shell: ~/.bob/settings/mcp.json (global) or .bob/mcp.json (project)
- ECA: ~/.config/eca/config.json (global) or .eca/config.json in the project
- Kiro: ~/.kiro/settings/mcp.json (user) or .kiro/settings/mcp.json (workspace)
- Kiro CLI: ~/.kiro/settings/mcp.json (user) or .kiro/settings/mcp.json (workspace)

```json
{
  "mcpServers": {
    "mcp-defectdojo": {
      "command": "uvx",
      "args": ["mcp-defectdojo==3.3.2"],
      "env": { "DEFECTDOJO_URL": "YOUR_DEFECTDOJO_URL", "DEFECTDOJO_API_KEY": "YOUR_DEFECTDOJO_API_KEY" }
    }
  }
}
```

## Claude Code

Run in a terminal:

```sh
claude mcp add --env DEFECTDOJO_URL=YOUR_DEFECTDOJO_URL --env DEFECTDOJO_API_KEY=YOUR_DEFECTDOJO_API_KEY --transport stdio mcp-defectdojo -- uvx mcp-defectdojo==3.3.2
```

## VS Code

Merge into .vscode/mcp.json:

```json
{
  "servers": {
    "mcp-defectdojo": {
      "type": "stdio",
      "command": "uvx",
      "args": ["mcp-defectdojo==3.3.2"],
      "env": { "DEFECTDOJO_URL": "YOUR_DEFECTDOJO_URL", "DEFECTDOJO_API_KEY": "YOUR_DEFECTDOJO_API_KEY" }
    }
  }
}
```

## Zed

Merge into ~/.config/zed/settings.json:

```json
{
  "context_servers": {
    "mcp-defectdojo": {
      "command": "uvx",
      "args": ["mcp-defectdojo==3.3.2"],
      "env": { "DEFECTDOJO_URL": "YOUR_DEFECTDOJO_URL", "DEFECTDOJO_API_KEY": "YOUR_DEFECTDOJO_API_KEY" }
    }
  }
}
```

## Continue

Merge into ~/.continue/config.yaml:

```yaml
mcpServers:
  - name: "mcp-defectdojo"
    type: stdio
    command: "uvx"
    args:
      - "mcp-defectdojo==3.3.2"
    env:
      "DEFECTDOJO_URL": "YOUR_DEFECTDOJO_URL"
      "DEFECTDOJO_API_KEY": "YOUR_DEFECTDOJO_API_KEY"
```

## Goose

Merge into ~/.config/goose/config.yaml:

```yaml
extensions:
  "mcp-defectdojo":
    type: stdio
    name: "mcp-defectdojo"
    enabled: true
    cmd: "uvx"
    args: ["mcp-defectdojo==3.3.2"]
    env_keys: []
    envs: { "DEFECTDOJO_URL": "YOUR_DEFECTDOJO_URL", "DEFECTDOJO_API_KEY": "YOUR_DEFECTDOJO_API_KEY" }
    timeout: 300
```

## Codex

Run in a terminal:

```sh
codex mcp add mcp-defectdojo --env DEFECTDOJO_URL=YOUR_DEFECTDOJO_URL --env DEFECTDOJO_API_KEY=YOUR_DEFECTDOJO_API_KEY -- uvx mcp-defectdojo==3.3.2
```

## Agenvoy

Merge into ~/.config/agenvoy/mcp.json:

```json
{
  "servers": {
    "mcp-defectdojo": {
      "command": "uvx",
      "args": ["mcp-defectdojo==3.3.2"],
      "env": { "DEFECTDOJO_URL": "YOUR_DEFECTDOJO_URL", "DEFECTDOJO_API_KEY": "YOUR_DEFECTDOJO_API_KEY" }
    }
  }
}
```

## Amp

Merge into ~/.config/amp/settings.json (user) or .amp/settings.json (workspace):

```json
{
  "amp.mcpServers": {
    "mcp-defectdojo": {
      "command": "uvx",
      "args": ["mcp-defectdojo==3.3.2"],
      "env": { "DEFECTDOJO_URL": "YOUR_DEFECTDOJO_URL", "DEFECTDOJO_API_KEY": "YOUR_DEFECTDOJO_API_KEY" }
    }
  }
}
```

Then restart the client, or reload its MCP servers, and ask it to list the server's tools to confirm it started.

Known advisories

None known for its packages.

Checked 2026-10-28 against OSV.dev and deps.dev.

From the publisher's entry in the Official MCP Registry (the registry entry)and from PyPI. We have not checked this server yet. Report a problem