Read-only MCP server for DefectDojo Community Edition: triage findings, grouped across products.
Connect Runs on your machine
claude mcp add defectdojo-community-mcp -e DEFECTDOJO_URL=<DEFECTDOJO_URL> -e DEFECTDOJO_API_KEY=<DEFECTDOJO_API_KEY> -e DEFECTDOJO_VERIFY_TLS=<DEFECTDOJO_VERIFY_TLS> -e DEFECTDOJO_TIMEOUT_SECONDS=<DEFECTDOJO_TIMEOUT_SECONDS> -- uvx defectdojo-community-mcp==0.1.1{
"mcpServers": {
"defectdojo-community-mcp": {
"command": "uvx",
"args": [
"defectdojo-community-mcp==0.1.1"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_VERIFY_TLS": "<DEFECTDOJO_VERIFY_TLS>",
"DEFECTDOJO_TIMEOUT_SECONDS": "<DEFECTDOJO_TIMEOUT_SECONDS>"
}
}
}
}{
"mcpServers": {
"defectdojo-community-mcp": {
"command": "uvx",
"args": [
"defectdojo-community-mcp==0.1.1"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_VERIFY_TLS": "<DEFECTDOJO_VERIFY_TLS>",
"DEFECTDOJO_TIMEOUT_SECONDS": "<DEFECTDOJO_TIMEOUT_SECONDS>"
}
}
}
}{
"servers": {
"defectdojo-community-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"defectdojo-community-mcp==0.1.1"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_VERIFY_TLS": "<DEFECTDOJO_VERIFY_TLS>",
"DEFECTDOJO_TIMEOUT_SECONDS": "<DEFECTDOJO_TIMEOUT_SECONDS>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
DEFECTDOJO_URLRequired | Base URL of your DefectDojo instance, e.g. https://defectdojo.example.com (no trailing /api/v2). |
DEFECTDOJO_API_KEYRequired, secret | DefectDojo API v2 token. Use a dedicated read-only user: this server never needs write access. |
DEFECTDOJO_VERIFY_TLSOptional | Set to false to skip TLS certificate verification. Discouraged; see SECURITY.md. |
DEFECTDOJO_TIMEOUT_SECONDSOptional | Per-request HTTP timeout in seconds. Defaults to 30. |
Details
| Package | [email protected] (PYPI, stdio) |
| Package | ghcr.io/systechgd/defectdojo-community-mcp:0.1.1 (OCI, stdio) |
| First published | 5 Nov 2026 |
| Last updated | 5 Nov 2026 |
| Registry name | io.github.systechgd/defectdojo-community-mcp |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.