Browse
→ Infrastructure
→ DefectDojo Intelligence MCP Server
DefectDojo Intelligence MCP Server
Permission-preserving MCP server for DefectDojo OSS REST API v2 with parity to DefectDojo Pro read tools plus deterministic analytics and reporting. It uses the caller own API token, keeps tokens out of logs and model output, and gates write and database-history tool groups off by default. Public GitHub repository created August 25, 2026.
MCP unverified
Integration
| Transport | http |
| Auth | api-key |
| Endpoint | python -m defectdojo_mcp.server |
| Install | git clone https://github.com/ZeeshanSultan/DefectDojo-MCP-Server.git && cd DefectDojo-MCP-Server && pip install -e . |
Use Cases
| 01 | Let an AppSec assistant query DefectDojo findings, products, engagements, and tests under the caller own permissions |
| 02 | Generate deterministic vulnerability analytics and reporting without asking the model to invent calculations |
| 03 | Deploy an external MCP adapter for DefectDojo OSS environments that do not have built-in Pro MCP |
Tags
defectdojo appsec vulnerability-management analytics reporting permission-preserving python security
Machine-readable: /api/servers.json
· JSON-LD schema embedded in <head>