1. Conduid
  2. Security
  3. Dtrack
MCP server · Security

Dtrack

· github.com/msiemens/dtrack-mcp

Model Context Protocol server for OWASP Dependency-Track.

Unclaimed mcpmodel-context-protocoldependency-trackowaspsbomvulnerability
InstallView source
37Low

Scored 4 months ago · breakdown

About Dtrack

Dtrack is an MCP server in the Security category: model Context Protocol server for OWASP Dependency-Track.

Install

Claude Code
claude mcp add dtrack -- npx -y dtrack-mcp
npx
npx -y dtrack-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (9)

audit_group_vulnerabilitiesAggregate findings across a collection project's children.

Parameters not published.

audit_project_vulnerabilitiesFindings plus summary counts for a single project.

Parameters not published.

get_groupResolve a collection project and list its direct children.

Parameters not published.

get_projectLook up a project by name (and optional version) and list its versions.

Parameters not published.

get_vulnerability_analysisFetch the analysis trail for a component/vulnerability pair.

Parameters not published.

get_vulnerability_detailsFetch canonical vulnerability details by UUID or source + ID.

Parameters not published.

list_project_findingsNormalized findings for a project, with filter options.

Parameters not published.

list_projectsList projects with optional name / hierarchy filters.

Parameters not published.

update_vulnerability_analysisUpdate the analysis decision for a component/vulnerability pair.

Parameters not published.

Ask AI

✦

Ask AI about Dtrack

Powered by Claude · Grounded in docs

I know everything about Dtrack. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Dtrack

How do I install Dtrack?

Run claude mcp add dtrack -- npx -y dtrack-mcp, then add the server to your MCP client's configuration.

Is Dtrack safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Dtrack still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.