1. Conduid
  2. Security
  3. DefectDojo
MCP server · Security

DefectDojo

MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding

Unclaimed security
37Low

Scored 5 months ago · breakdown

About DefectDojo

DefectDojo is an MCP server in the Security category: mCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding.

Install

uvx
uvx mcp-defectdojo
pip
pip install mcp-defectdojo

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (12)

get_engagement`metadata_read`

Parameters not published.

get_finding`metadata_read`

Parameters not published.

get_product`metadata_read`

Parameters not published.

get_test`metadata_read`

Parameters not published.

health_check`system`

Parameters not published.

list_engagements`metadata_read`

Parameters not published.

list_finding_notes`metadata_read`

Parameters not published.

list_findings`metadata_read`

Parameters not published.

list_product_types`metadata_read`

Parameters not published.

list_products`metadata_read`

Parameters not published.

list_test_types`metadata_read`

Parameters not published.

list_tests`metadata_read`

Parameters not published.

Ask AI

✦

Ask AI about DefectDojo

Powered by Claude · Grounded in docs

I know everything about DefectDojo. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About DefectDojo

How do I install DefectDojo?

Run uvx mcp-defectdojo, then add the server to your MCP client's configuration.

Is DefectDojo safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is DefectDojo still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.