{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_6wydsb36bnyk","handle":"defectdojo-mcp","url":"https://wellknown.network/agents/defectdojo-mcp","links":{"self":"https://wellknown.network/agents/defectdojo-mcp/record.json","html":"https://wellknown.network/agents/defectdojo-mcp","markdown":"https://wellknown.network/agents/defectdojo-mcp/record.md","api":"https://wellknown.network/api/v1/agents/defectdojo-mcp","status":"https://wellknown.network/api/v1/agents/defectdojo-mcp/status","claim":"https://wellknown.network/agents/defectdojo-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/defectdojo-mcp/claim.json","badge":"https://wellknown.network/agents/defectdojo-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/defectdojo-mcp/history","tools":"https://wellknown.network/api/v1/agents/defectdojo-mcp/tools"},"ard":{"identifier":"urn:air::server:defectdojo-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"defectdojo-mcp","summary":"DefectDojo MCP server for integrating with DefectDojo vulnerability management system","description":"# DefectDojo MCP Server\n\n[![PyPI version](https://badge.fury.io/py/defectdojo.svg)](https://badge.fury.io/py/defectdojo) <!-- Add this badge if/when published to PyPI -->\n\nThis project provides a [Model Context Protocol (MCP)](https://github.com/modelcontextprotocol/specification) server implementation for [DefectDojo](https://github.com/DefectDojo/django-DefectDojo), a popular open-source vulnerability management tool. It allows AI agents and other MCP clients to interact with the DefectDojo API programmatically.\n\n## Features\n\nThis MCP server exposes tools for managing key DefectDojo entities:\n\n*   **Findings:** Fetch, search, create, update status, and add notes.\n*   **Products:** List available products.\n*   **Engagements:** List, retrieve details, create, update, and close engagements.\n\n## Installation & Running\n\nThere are a couple of ways to run this server:\n\n### Using `uvx` (Recommended)\n\n`uvx` executes Python applications in temporary virtual environments, installing dependencies automatically.\n\n```bash\nuvx defectdojo-mcp\n```\n\n### Using `pip`\n\nYou can install the package into your Python environment using `pip`.\n\n```bash\n# Install directly from the cloned source code directory\npip install .\n\n# Or, if the package is published on PyPI\npip install defectdojo-mcp\n```\n\nOnce installed via pip, run the server using:\n\n```bash\ndefectdojo-mcp\n```\n\n## Configuration\n\nThe server requires the following environment variables to connect to your DefectDojo instance:\n\n*   `DEFECTDOJO_API_TOKEN` (**required**): Your DefectDojo API token for authentication.\n*   `DEFECTDOJO_API_BASE` (**required**): The base URL of your DefectDojo instance (e.g., `https://your-defectdojo-instance.com`).\n\nYou can configure these in your MCP client's settings file. Here's an example using the `uvx` command:\n\n```json\n{\n  \"mcpServers\": {\n    \"defectdojo\": {\n      \"command\": \"uvx\",\n      \"args\": [\"defectdojo-mcp\"],\n      \"env\": {\n        \"DEFECTDOJO_API_TOKEN\": \"YOUR_API_TOKEN_HERE\",\n        \"DEFECTD…","publisher":{"name":"Jamiesonio","url":null},"homepage":"https://github.com/jamiesonio/defectdojo-mcp","repository":"https://github.com/jamiesonio/defectdojo-mcp","version":"0.1.2","license":"MIT","protocols":["mcp"],"tags":["defectdojo","appsec","mcp","devsecops","llm"],"pricing":null,"endpoints":[{"url":"pypi:defectdojo-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"defectdojo-mcp","registry":"pypi","observedAt":"2026-11-09T03:24:33.799Z","publishedAt":"2025-04-01T04:10:07.448496Z","latestVersion":"0.1.2"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"defectdojo-mcp","url":"https://pypi.org/project/defectdojo-mcp/","firstSeenAt":"2026-09-09T14:31:12.784Z","fetchedAt":"2026-11-09T03:23:16.022Z","normalizedAt":"2026-11-09T03:23:16.022Z"}]},"firstSeenAt":"2026-09-09T14:31:12.784Z","updatedAt":"2026-11-09T03:24:33.799Z"}