Loading
DefectDojo
io.github.inspicereClaim this server
Power your agent
Add this server
The publisher's own command. Not a PlugMCP endpoint.
Host a copy with our keys and logs.
Local command
uvx mcp-defectdojo==3.3.2Credentials from the publisher
- DEFECTDOJO_URL — Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true)
- DEFECTDOJO_API_KEY — API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode.
- DEFECTDOJO_READ_API_KEY — Optional read-only API key (used for GET requests in dual-key mode)
- DEFECTDOJO_WRITE_API_KEY — Optional write API key (used for POST/PATCH in dual-key mode)
- MCP_AUTH_TOKEN — Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_<NAME>=<token>:<role> for RBAC)
- AUDIT_HMAC_KEY — HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))'
Claude Code has no install link for a local command. Copy the command below and run it in a terminal.
shClaude Code
DEFECTDOJO_URL=<value> DEFECTDOJO_API_KEY=<secret> DEFECTDOJO_READ_API_KEY=<secret> DEFECTDOJO_WRITE_API_KEY=<secret> MCP_AUTH_TOKEN=<secret> AUDIT_HMAC_KEY=<secret> claude mcp add io.github.inspicere-mcp-defectdojo -- uvx mcp-defectdojo==3.3.2Run in a terminal.
jsonClaude Desktop
{ "mcpServers": { "io.github.inspicere-mcp-defectdojo": { "command": "uvx", "args": [ "mcp-defectdojo==3.3.2" ], "env": { "DEFECTDOJO_URL": "<value>", "DEFECTDOJO_API_KEY": "<secret>", "DEFECTDOJO_READ_API_KEY": "<secret>", "DEFECTDOJO_WRITE_API_KEY": "<secret>", "MCP_AUTH_TOKEN": "<secret>", "AUDIT_HMAC_KEY": "<secret>" } } }}claude_desktop_config.json
Local · pypiPublisher installStep-by-step: add this in Claude
Remote URL or a command on your machine? How the two installs differ
Run on PlugMCP
Host a copy with our keys and logs.
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
LaunchServer facts
Local- Transport
- stdio
- Version
Tools
Tools
No tool list yet. Remote servers get one after the first health check.
FAQ