Skip to content

Raw values for DefectDojo

io.github.inspicere/mcp-defectdojo · Registry status: active

Report data on this entry

What the source declared verbatim, unchanged and uninterpreted. The derived values on the overview page are computed from these.

Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin.

Raw values
Description (raw)MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding
Source: MCP-Register · collected on 2026-08-26 · self-declared
Environment variables (raw)DEFECTDOJO_URL, DEFECTDOJO_API_KEY, DEFECTDOJO_READ_API_KEY, DEFECTDOJO_WRITE_API_KEY, MCP_AUTH_TOKEN, AUDIT_HMAC_KEY
Source: MCP-Register · collected on 2026-08-06 · self-declared
Required secret variables (raw)DEFECTDOJO_API_KEY
Source: MCP-Register · collected on 2026-08-06 · self-declared
Transports (raw)stdio
Source: MCP-Register · collected on 2026-08-06 · self-declared
Path arguments (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-06 · self-declared
Repository (raw)https://github.com/inspicere/mcp-defectdojo
Source: MCP-Register · collected on 2026-08-06 · self-declared
Package registries (raw)pypi
Source: MCP-Register · collected on 2026-08-06 · self-declared
Required secret headers (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Path environment variables (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Remote URLs (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Remote hosts (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Registry status message (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
First listed in the registry (raw)2026-05-28
Source: MCP-Register · collected on 2026-08-16 · self-declared
Last changed in the registry (raw)2026-05-28
Source: MCP-Register · collected on 2026-08-16 · self-declared
Schema version of the raw record (raw)https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json
Source: MCP-Register · collected on 2026-08-16 · self-declared
Delivery form (raw)package
Source: MCP-Register · collected on 2026-08-16 · self-declared
Repository platform (raw)github
Source: MCP-Register · collected on 2026-08-16 · self-declared
Repository subfolder (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Package identifiers (raw)mcp-defectdojo
Source: MCP-Register · collected on 2026-08-16 · self-declared
Package versions (raw)3.3.2
Source: MCP-Register · collected on 2026-08-16 · self-declared
Runtime hints (raw)uvx
Source: MCP-Register · collected on 2026-08-16 · self-declared
Environment variable formats (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Environment variable descriptions (raw)AUDIT_HMAC_KEY=HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))' · DEFECTDOJO_API_KEY=API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode. · DEFECTDOJO_READ_API_KEY=Optional read-only API key (used for GET requests in dual-key mode) · DEFECTDOJO_URL=Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true) · DEFECTDOJO_WRITE_API_KEY=Optional write API key (used for POST/PATCH in dual-key mode) · MCP_AUTH_TOKEN=Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_<NAME>=<token>:<role> for RBAC)
Source: MCP-Register · collected on 2026-08-16 · self-declared
Icon formats (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Connection paths (source structure){"packages":[{"registryType":"pypi","identifier":"mcp-defectdojo","version":"3.3.2","runtimeHint":"uvx","transport":"stdio","environment":[{"name":"DEFECTDOJO_URL","description":"Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true)","required":true,"secret":false},{"name":"DEFECTDOJO_API_KEY","description":"API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode.","required":true,"secret":true},{"name":"DEFECTDOJO_READ_API_KEY","description":"Optional read-only API key (used for GET requests in dual-key mode)","required":false,"secret":true},{"name":"DEFECTDOJO_WRITE_API_KEY","description":"Optional write API key (used for POST/PATCH in dual-key mode)","required":false,"secret":true},{"name":"MCP_AUTH_TOKEN","description":"Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_<NAME>=<token>:<role> for RBAC)","required":false,"secret":true},{"name":"AUDIT_HMAC_KEY","description":"HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))'","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[]}
Source: MCP-Register · collected on 2026-09-08 · self-declared

Position within the directory

How many of the 42,239 published entries carry the same measured value. A reference figure, not an assessment.

All 4 values together are carried by 3,569 of 42,239 entries.

tracevero · https://tracevero.com/mcp/io-github-inspicere-mcp-defectdojo/rohangaben