Search, triage and import findings in DefectDojo through its REST API v2.
Connect Runs on your machine
claude mcp add defectdojo-mcp -e DEFECTDOJO_URL=<DEFECTDOJO_URL> -e DEFECTDOJO_API_KEY=<DEFECTDOJO_API_KEY> -e DEFECTDOJO_ALLOW_WRITES=<DEFECTDOJO_ALLOW_WRITES> -e DEFECTDOJO_VERIFY_SSL=<DEFECTDOJO_VERIFY_SSL> -e DEFECTDOJO_IMPORT_DIRS=<DEFECTDOJO_IMPORT_DIRS> -- uvx defectdojo-mcp-server==0.1.0{
"mcpServers": {
"defectdojo-mcp": {
"command": "uvx",
"args": [
"defectdojo-mcp-server==0.1.0"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_ALLOW_WRITES": "<DEFECTDOJO_ALLOW_WRITES>",
"DEFECTDOJO_VERIFY_SSL": "<DEFECTDOJO_VERIFY_SSL>",
"DEFECTDOJO_IMPORT_DIRS": "<DEFECTDOJO_IMPORT_DIRS>"
}
}
}
}{
"mcpServers": {
"defectdojo-mcp": {
"command": "uvx",
"args": [
"defectdojo-mcp-server==0.1.0"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_ALLOW_WRITES": "<DEFECTDOJO_ALLOW_WRITES>",
"DEFECTDOJO_VERIFY_SSL": "<DEFECTDOJO_VERIFY_SSL>",
"DEFECTDOJO_IMPORT_DIRS": "<DEFECTDOJO_IMPORT_DIRS>"
}
}
}
}{
"servers": {
"defectdojo-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"defectdojo-mcp-server==0.1.0"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_ALLOW_WRITES": "<DEFECTDOJO_ALLOW_WRITES>",
"DEFECTDOJO_VERIFY_SSL": "<DEFECTDOJO_VERIFY_SSL>",
"DEFECTDOJO_IMPORT_DIRS": "<DEFECTDOJO_IMPORT_DIRS>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
DEFECTDOJO_URLRequired | Base URL of your DefectDojo instance, for example https://defectdojo.example.com |
DEFECTDOJO_API_KEYRequired, secret | DefectDojo API v2 key |
DEFECTDOJO_ALLOW_WRITESOptional | Set to true to enable write tools. Read-only by default. |
DEFECTDOJO_VERIFY_SSLOptional | true, false, or a path to a CA bundle |
DEFECTDOJO_IMPORT_DIRSOptional | Folders that scan reports may be read from for imports |
Details
| Package | [email protected] (PYPI, stdio) |
| Package | ghcr.io/defectdojo/defectdojo-mcp:0.1.0 (OCI, stdio) |
| First published | 11 Nov 2026 |
| Last updated | 11 Nov 2026 |
| Registry name | io.github.DefectDojo/defectdojo-mcp |
More search and web servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.