DefectDojo MCP server provides a bridge to the DefectDojo vulnerability management system, enabling AI assistants to interact with security findings, products, and engagements. Developed by jamiesonio, this implementation offers tools for retrieving, searching, and updating vulnerability data through an asynchronous HTTP client that handles authentication and error management. The server exposes specialized functions for managing security findings (including status updates and note addition), listing products, and handling engagement lifecycle operations. Built with Python 3.12 and the FastMCP framework, it's particularly valuable for security teams who want to integrate vulnerability management workflows into their AI assistant interactions.
Nessuna recensione ancora. Sii il primo a recensire!
Accedi per unirti alla conversazione
Highlight AIRetrieve findings with filtering options for product name, status, severity, and pagination parameters (limit, offset).
Search findings using a text query, with options for filtering and pagination.
Change the status of a specific finding (e.g., Active, Verified, False Positive). Requires finding_id and status parameters.
Add a textual note to a finding. Requires finding_id and the note content.
Create a new finding associated with a test. Requires title, test_id, severity, description, and cwe parameters.
List products with optional filtering for name and pagination parameters.
List engagements with options for filtering by product_id, status, and name, along with pagination.
Get details for a specific engagement by its ID.
Create a new engagement for a product. Requires product_id, name, target_start, target_end, and status parameters.
Modify details of an existing engagement. Requires engagement_id and any fields to be updated.
Mark an engagement as completed. Requires engagement_id.
