DefectDojo Community for VS Code

io.github.systechgd/defectdojo-community-mcp

Read-only MCP server for DefectDojo Community Edition: triage findings, grouped across products.

client:VS Code transport:stdio runtime:pypi

Install DefectDojo Community in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "defectdojo-url",
      "description": "DEFECTDOJO_URL",
      "password": true
    },
    {
      "type": "promptString",
      "id": "defectdojo-api-key",
      "description": "DEFECTDOJO_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "defectdojo-verify-tls",
      "description": "DEFECTDOJO_VERIFY_TLS",
      "password": true
    },
    {
      "type": "promptString",
      "id": "defectdojo-timeout-seconds",
      "description": "DEFECTDOJO_TIMEOUT_SECONDS",
      "password": true
    }
  ],
  "servers": {
    "defectdojo-community-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "defectdojo-community-mcp"
      ],
      "env": {
        "DEFECTDOJO_URL": "${input:defectdojo-url}",
        "DEFECTDOJO_API_KEY": "${input:defectdojo-api-key}",
        "DEFECTDOJO_VERIFY_TLS": "${input:defectdojo-verify-tls}",
        "DEFECTDOJO_TIMEOUT_SECONDS": "${input:defectdojo-timeout-seconds}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

DefectDojo Community in other clients

DefectDojo Community MCP server