DefectDojo MCP server provides a bridge to the DefectDojo vulnerability management system, enabling AI assistants to interact with security findings, products, and engagements. Developed by jamiesonio, this implementation offers tools for retrieving, searching, and updating vulnerability data through an asynchronous HTTP client that handles authentication and error management. The server exposes specialized functions for managing security findings (including status updates and note addition), listing products, and handling engagement lifecycle operations. Built with Python 3.12 and the FastMCP framework, it's particularly valuable for security teams who want to integrate vulnerability management workflows into their AI assistant interactions.
No reviews yet. Be the first to review!
Sign in to join the conversation
Highlight AIRetrieve findings with filtering options such as product_name, status, and severity, along with pagination parameters like limit and offset.
Search findings using a text query, with options for filtering and pagination.
Change the status of a specific finding, with options including Active, Verified, or False Positive.
Add a textual note to a finding identified by its finding_id.
Create a new finding associated with a test, requiring parameters such as title, test_id, severity, description, and cwe.
List products available, with options for filtering by name and pagination.
List engagements with filtering options for product_id, status, and name, as well as pagination.
Get details for a specific engagement by its ID.
Create a new engagement for a product, requiring parameters such as product_id, name, target_start, target_end, and status.
Modify details of an existing engagement identified by engagement_id.
Mark an engagement as completed using its engagement_id.
