MCP server for DefectDojo vulnerability management
接入配置
选择客户端,复制配置,再按项目文档补齐环境变量。
claude mcp add defectdojo --env DEFECTDOJO_URL='<DEFECTDOJO_URL>' --env DEFECTDOJO_API_KEY='<DEFECTDOJO_API_KEY>' --env DEFECTDOJO_READ_API_KEY='<DEFECTDOJO_READ_API_KEY>' --env DEFECTDOJO_WRITE_API_KEY='<DEFECTDOJO_WRITE_API_KEY>' --env MCP_AUTH_TOKEN='<MCP_AUTH_TOKEN>' --env AUDIT_HMAC_KEY='<AUDIT_HMAC_KEY>' -- uvx mcp-defectdojo~/.codex/config.toml
[mcp_servers.defectdojo]
command = "uvx"
args = ["mcp-defectdojo"]
env = { DEFECTDOJO_URL = "<DEFECTDOJO_URL>", DEFECTDOJO_API_KEY = "<DEFECTDOJO_API_KEY>", DEFECTDOJO_READ_API_KEY = "<DEFECTDOJO_READ_API_KEY>", DEFECTDOJO_WRITE_API_KEY = "<DEFECTDOJO_WRITE_API_KEY>", MCP_AUTH_TOKEN = "<MCP_AUTH_TOKEN>", AUDIT_HMAC_KEY = "<AUDIT_HMAC_KEY>" }
# codex mcp add defectdojo --env DEFECTDOJO_URL='<DEFECTDOJO_URL>' --env DEFECTDOJO_API_KEY='<DEFECTDOJO_API_KEY>' --env DEFECTDOJO_READ_API_KEY='<DEFECTDOJO_READ_API_KEY>' --env DEFECTDOJO_WRITE_API_KEY='<DEFECTDOJO_WRITE_API_KEY>' --env MCP_AUTH_TOKEN='<MCP_AUTH_TOKEN>' --env AUDIT_HMAC_KEY='<AUDIT_HMAC_KEY>' -- uvx mcp-defectdojo~/.cursor/mcp.json
{
"mcpServers": {
"defectdojo": {
"command": "uvx",
"args": [
"mcp-defectdojo"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_READ_API_KEY": "<DEFECTDOJO_READ_API_KEY>",
"DEFECTDOJO_WRITE_API_KEY": "<DEFECTDOJO_WRITE_API_KEY>",
"MCP_AUTH_TOKEN": "<MCP_AUTH_TOKEN>",
"AUDIT_HMAC_KEY": "<AUDIT_HMAC_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"defectdojo": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-defectdojo"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_READ_API_KEY": "<DEFECTDOJO_READ_API_KEY>",
"DEFECTDOJO_WRITE_API_KEY": "<DEFECTDOJO_WRITE_API_KEY>",
"MCP_AUTH_TOKEN": "<MCP_AUTH_TOKEN>",
"AUDIT_HMAC_KEY": "<AUDIT_HMAC_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"defectdojo": {
"command": "uvx",
"args": [
"mcp-defectdojo"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_READ_API_KEY": "<DEFECTDOJO_READ_API_KEY>",
"DEFECTDOJO_WRITE_API_KEY": "<DEFECTDOJO_WRITE_API_KEY>",
"MCP_AUTH_TOKEN": "<MCP_AUTH_TOKEN>",
"AUDIT_HMAC_KEY": "<AUDIT_HMAC_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"defectdojo": {
"command": "uvx",
"args": [
"mcp-defectdojo"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_READ_API_KEY": "<DEFECTDOJO_READ_API_KEY>",
"DEFECTDOJO_WRITE_API_KEY": "<DEFECTDOJO_WRITE_API_KEY>",
"MCP_AUTH_TOKEN": "<MCP_AUTH_TOKEN>",
"AUDIT_HMAC_KEY": "<AUDIT_HMAC_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"defectdojo": {
"command": "uvx",
"args": [
"mcp-defectdojo"
],
"env": {
"DEFECTDOJO_URL": "<DEFECTDOJO_URL>",
"DEFECTDOJO_API_KEY": "<DEFECTDOJO_API_KEY>",
"DEFECTDOJO_READ_API_KEY": "<DEFECTDOJO_READ_API_KEY>",
"DEFECTDOJO_WRITE_API_KEY": "<DEFECTDOJO_WRITE_API_KEY>",
"MCP_AUTH_TOKEN": "<MCP_AUTH_TOKEN>",
"AUDIT_HMAC_KEY": "<AUDIT_HMAC_KEY>"
}
}
}
}需要的环境变量
DEFECTDOJO_URLDEFECTDOJO_API_KEYDEFECTDOJO_READ_API_KEYDEFECTDOJO_WRITE_API_KEYMCP_AUTH_TOKENAUDIT_HMAC_KEY
把占位值换成你自己的密钥;不要把密钥提交到代码仓库。