DefectDojo for Gemini CLI
io.github.inspicere/mcp-defectdojo
MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding
client:Gemini CLI
transport:stdio
runtime:pypi
Install DefectDojo in Gemini CLI
~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json
{
"mcpServers": {
"mcp-defectdojo": {
"command": "uvx",
"args": [
"mcp-defectdojo"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_READ_API_KEY": "<DEFECTDOJO_READ_API_KEY>",
"DEFECTDOJO_WRITE_API_KEY": "<DEFECTDOJO_WRITE_API_KEY>",
"MCP_AUTH_TOKEN": "<MCP_AUTH_TOKEN>",
"AUDIT_HMAC_KEY": "<AUDIT_HMAC_KEY>"
}
}
}
}
Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs