DefectDojo MCP server provides a bridge to the DefectDojo vulnerability management system, enabling AI assistants to interact with security findings, products, and engagements. Developed by jamiesonio, this implementation offers tools for retrieving, searching, and updating vulnerability data through an asynchronous HTTP client that handles authentication and error management. The server exposes specialized functions for managing security findings (including status updates and note addition), listing products, and handling engagement lifecycle operations. Built with Python 3.12 and the FastMCP framework, it's particularly valuable for security teams who want to integrate vulnerability management workflows into their AI assistant interactions.
Aún no hay reseñas. ¡Sé el primero en reseñar!
Inicia sesión para unirte a la conversación
Highlight AIRetrieve findings with filtering options for product name, status, severity, and pagination parameters such as limit and offset.
Search findings using a text query, with options for filtering and pagination.
Change the status of a specific finding (e.g., Active, Verified, False Positive) by providing the finding ID and the desired status.
Add a textual note to a finding by specifying the finding ID and the note content.
Create a new finding associated with a test, requiring parameters like title, test ID, severity, description, and CWE.
List products with options for filtering by name and product type, as well as pagination options.
List engagements with filtering options for product ID, status, and name, including pagination.
Get details for a specific engagement by its ID.
Create a new engagement for a product, requiring parameters like product ID, name, target start and end dates, and status.
Modify details of an existing engagement by providing the engagement ID and the new details.
Mark an engagement as completed by providing the engagement ID.
