DefectDojo for VS Code
io.github.inspicere/mcp-defectdojo
MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding
client:VS Code
transport:stdio
runtime:pypi
Install DefectDojo in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "defectdojo-url",
"description": "DEFECTDOJO_URL",
"password": true
},
{
"type": "promptString",
"id": "defectdojo-api-key",
"description": "DEFECTDOJO_API_KEY",
"password": true
},
{
"type": "promptString",
"id": "defectdojo-read-api-key",
"description": "DEFECTDOJO_READ_API_KEY",
"password": true
},
{
"type": "promptString",
"id": "defectdojo-write-api-key",
"description": "DEFECTDOJO_WRITE_API_KEY",
"password": true
},
{
"type": "promptString",
"id": "mcp-auth-token",
"description": "MCP_AUTH_TOKEN",
"password": true
},
{
"type": "promptString",
"id": "audit-hmac-key",
"description": "AUDIT_HMAC_KEY",
"password": true
}
],
"servers": {
"mcp-defectdojo": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-defectdojo"
],
"env": {
"DEFECTDOJO_URL": "${input:defectdojo-url}",
"DEFECTDOJO_API_KEY": "${input:defectdojo-api-key}",
"DEFECTDOJO_READ_API_KEY": "${input:defectdojo-read-api-key}",
"DEFECTDOJO_WRITE_API_KEY": "${input:defectdojo-write-api-key}",
"MCP_AUTH_TOKEN": "${input:mcp-auth-token}",
"AUDIT_HMAC_KEY": "${input:audit-hmac-key}"
}
}
}
}VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs