--- bezeichner: "io.github.inspicere/mcp-defectdojo" art: "mcp_server" slug: "io-github-inspicere-mcp-defectdojo" paketkoordinate: "pypi:mcp-defectdojo" status: "aktiv" homepage: "https://github.com/inspicere/mcp-defectdojo" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "io.github.inspicere" registerseite: "https://tracevero.de/mcp/io-github-inspicere-mcp-defectdojo" abgerufen_am: "2026-10-10" zugangsdaten_erforderlich: true ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding" version: "3.3.2" roh_umgebungsvariablen: "DEFECTDOJO_URL, DEFECTDOJO_API_KEY, DEFECTDOJO_READ_API_KEY, DEFECTDOJO_WRITE_API_KEY, MCP_AUTH_TOKEN, AUDIT_HMAC_KEY" roh_geheime_pflichtvariablen: "DEFECTDOJO_API_KEY" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/inspicere/mcp-defectdojo" roh_paketquellen: "pypi" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-05-28" roh_aktualisiert_am: "2026-05-28" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "mcp-defectdojo" roh_paketversionen: "3.3.2" roh_laufzeithinweise: "uvx" roh_umgebungsformate: "" roh_umgebungsbeschreibungen: "AUDIT_HMAC_KEY=HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))' · DEFECTDOJO_API_KEY=API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode. · DEFECTDOJO_READ_API_KEY=Optional read-only API key (used for GET requests in dual-key mode) · DEFECTDOJO_URL=Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true) · DEFECTDOJO_WRITE_API_KEY=Optional write API key (used for POST/PATCH in dual-key mode) · MCP_AUTH_TOKEN=Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_=: for RBAC)" roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"pypi\",\"identifier\":\"mcp-defectdojo\",\"version\":\"3.3.2\",\"runtimeHint\":\"uvx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"DEFECTDOJO_URL\",\"description\":\"Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true)\",\"required\":true,\"secret\":false},{\"name\":\"DEFECTDOJO_API_KEY\",\"description\":\"API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode.\",\"required\":true,\"secret\":true},{\"name\":\"DEFECTDOJO_READ_API_KEY\",\"description\":\"Optional read-only API key (used for GET requests in dual-key mode)\",\"required\":false,\"secret\":true},{\"name\":\"DEFECTDOJO_WRITE_API_KEY\",\"description\":\"Optional write API key (used for POST/PATCH in dual-key mode)\",\"required\":false,\"secret\":true},{\"name\":\"MCP_AUTH_TOKEN\",\"description\":\"Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_=: for RBAC)\",\"required\":false,\"secret\":true},{\"name\":\"AUDIT_HMAC_KEY\",\"description\":\"HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))'\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # DefectDojo ## Gemessene Werte | Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe | | --- | --- | --- | --- | --- | --- | | Pflicht-Geheimnisse deklariert | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: DEFECTDOJO_API_KEY; roh_geheime_pflichtkopfzeilen: | | Ausführungsort | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio | | Pfadargument vorhanden | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository-Adresse geführt | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/inspicere/mcp-defectdojo | | Beschreibung (Rohangabe) | MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Deklarierte Version | 3.3.2 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Umgebungsvariablen (Rohangabe) | DEFECTDOJO_URL, DEFECTDOJO_API_KEY, DEFECTDOJO_READ_API_KEY, DEFECTDOJO_WRITE_API_KEY, MCP_AUTH_TOKEN, AUDIT_HMAC_KEY | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Geheime Pflichtvariablen (Rohangabe) | DEFECTDOJO_API_KEY | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Transportarten (Rohangabe) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Pfadargumente (Rohangabe) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Repository (Rohangabe) | https://github.com/inspicere/mcp-defectdojo | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Paketquellen (Rohangabe) | pypi | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Geheime Pflichtkopfzeilen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Pfad-Umgebungsvariablen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote-Adressen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote-Hosts (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Statusmeldung des Registers (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Im Register eingetragen am (Rohangabe) | 2026-05-28 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Im Register geändert am (Rohangabe) | 2026-05-28 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository-Plattform (Rohangabe) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository-Unterordner (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Paketbezeichner (Rohangabe) | mcp-defectdojo | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Paketversionen (Rohangabe) | 3.3.2 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Laufzeithinweise (Rohangabe) | uvx | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Formate der Umgebungsvariablen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Beschreibungen der Umgebungsvariablen (Rohangabe) | AUDIT_HMAC_KEY=HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))' · DEFECTDOJO_API_KEY=API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode. · DEFECTDOJO_READ_API_KEY=Optional read-only API key (used for GET requests in dual-key mode) · DEFECTDOJO_URL=Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true) · DEFECTDOJO_WRITE_API_KEY=Optional write API key (used for POST/PATCH in dual-key mode) · MCP_AUTH_TOKEN=Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_=: for RBAC) | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Symbolformate (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"pypi","identifier":"mcp-defectdojo","version":"3.3.2","runtimeHint":"uvx","transport":"stdio","environment":[{"name":"DEFECTDOJO_URL","description":"Base URL of the DefectDojo instance (must use https:// unless ALLOW_INSECURE_HTTP=true)","required":true,"secret":false},{"name":"DEFECTDOJO_API_KEY","description":"API key for DefectDojo (generate at DefectDojo > API v2 > Your API Key). Use DEFECTDOJO_READ_API_KEY + DEFECTDOJO_WRITE_API_KEY for least-privilege dual-key mode.","required":true,"secret":true},{"name":"DEFECTDOJO_READ_API_KEY","description":"Optional read-only API key (used for GET requests in dual-key mode)","required":false,"secret":true},{"name":"DEFECTDOJO_WRITE_API_KEY","description":"Optional write API key (used for POST/PATCH in dual-key mode)","required":false,"secret":true},{"name":"MCP_AUTH_TOKEN","description":"Bearer token granting admin-role access (legacy single-token mode — prefer MCP_ROLE_=: for RBAC)","required":false,"secret":true},{"name":"AUDIT_HMAC_KEY","description":"HMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))'","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Verweise - Namensraum: [[namensraum/io-github-inspicere|io.github.inspicere]] --- - Registerseite: - Abgerufen am: 2026-10-10