--- bezeichner: "io.github.inspicere/mcp-defectdojo" art: "mcp_server" slug: "io-github-inspicere-mcp-defectdojo" paketkoordinate: "pypi:mcp-defectdojo" status: "aktiv" homepage: "https://github.com/inspicere/mcp-defectdojo" erhebungsstand: "2026-10-12T01:17:02.346Z" namensraum: "io.github.inspicere" registerseite: "https://tracevero.com/mcp/io-github-inspicere-mcp-defectdojo" abgerufen_am: "2026-10-12" zugangsdaten_erforderlich: true ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding" version: "3.3.2" roh_umgebungsvariablen: "DEFECTDOJO_URL, DEFECTDOJO_API_KEY, DEFECTDOJO_READ_API_KEY, DEFECTDOJO_WRITE_API_KEY, MCP_AUTH_TOKEN, AUDIT_HMAC_KEY" roh_geheime_pflichtvariablen: "DEFECTDOJO_API_KEY" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/inspicere/mcp-defectdojo" roh_paketquellen: "pypi" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-05-28" roh_aktualisiert_am: "2026-05-28" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "mcp-defectdojo" roh_paketversionen: "3.3.2" roh_laufzeithinweise: "uvx" roh_umgebungsformate: "" roh_umgebungsbeschreibungen: "AUDIT_HMAC_KEY=HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))' · DEFECTDOJO_API_KEY=API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode. · DEFECTDOJO_READ_API_KEY=Optional read-only API key (used for GET requests in dual-key mode) · DEFECTDOJO_URL=Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true) · DEFECTDOJO_WRITE_API_KEY=Optional write API key (used for POST/PATCH in dual-key mode) · MCP_AUTH_TOKEN=Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_=: for RBAC)" roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"pypi\",\"identifier\":\"mcp-defectdojo\",\"version\":\"3.3.2\",\"runtimeHint\":\"uvx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"DEFECTDOJO_URL\",\"description\":\"Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true)\",\"required\":true,\"secret\":false},{\"name\":\"DEFECTDOJO_API_KEY\",\"description\":\"API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode.\",\"required\":true,\"secret\":true},{\"name\":\"DEFECTDOJO_READ_API_KEY\",\"description\":\"Optional read-only API key (used for GET requests in dual-key mode)\",\"required\":false,\"secret\":true},{\"name\":\"DEFECTDOJO_WRITE_API_KEY\",\"description\":\"Optional write API key (used for POST/PATCH in dual-key mode)\",\"required\":false,\"secret\":true},{\"name\":\"MCP_AUTH_TOKEN\",\"description\":\"Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_=: for RBAC)\",\"required\":false,\"secret\":true},{\"name\":\"AUDIT_HMAC_KEY\",\"description\":\"HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))'\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # DefectDojo ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: DEFECTDOJO_API_KEY; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio | | Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/inspicere/mcp-defectdojo | | Description (raw) | MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Declared version | 3.3.2 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Environment variables (raw) | DEFECTDOJO_URL, DEFECTDOJO_API_KEY, DEFECTDOJO_READ_API_KEY, DEFECTDOJO_WRITE_API_KEY, MCP_AUTH_TOKEN, AUDIT_HMAC_KEY | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret variables (raw) | DEFECTDOJO_API_KEY | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Repository (raw) | https://github.com/inspicere/mcp-defectdojo | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Package registries (raw) | pypi | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | First listed in the registry (raw) | 2026-05-28 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-05-28 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package identifiers (raw) | mcp-defectdojo | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package versions (raw) | 3.3.2 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Runtime hints (raw) | uvx | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable formats (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable descriptions (raw) | AUDIT_HMAC_KEY=HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))' · DEFECTDOJO_API_KEY=API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode. · DEFECTDOJO_READ_API_KEY=Optional read-only API key (used for GET requests in dual-key mode) · DEFECTDOJO_URL=Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true) · DEFECTDOJO_WRITE_API_KEY=Optional write API key (used for POST/PATCH in dual-key mode) · MCP_AUTH_TOKEN=Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_=: for RBAC) | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"pypi","identifier":"mcp-defectdojo","version":"3.3.2","runtimeHint":"uvx","transport":"stdio","environment":[{"name":"DEFECTDOJO_URL","description":"Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true)","required":true,"secret":false},{"name":"DEFECTDOJO_API_KEY","description":"API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode.","required":true,"secret":true},{"name":"DEFECTDOJO_READ_API_KEY","description":"Optional read-only API key (used for GET requests in dual-key mode)","required":false,"secret":true},{"name":"DEFECTDOJO_WRITE_API_KEY","description":"Optional write API key (used for POST/PATCH in dual-key mode)","required":false,"secret":true},{"name":"MCP_AUTH_TOKEN","description":"Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_=: for RBAC)","required":false,"secret":true},{"name":"AUDIT_HMAC_KEY","description":"HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))'","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-inspicere|io.github.inspicere]] --- - Registry page: - Retrieved on: 2026-10-12