Skip to main content
Glama
dcianciulli

DefectDojo MCP Server

by dcianciulli

create_jira_instance

Configure a JIRA instance in DefectDojo with URL, credentials, and severity mapping to integrate vulnerability issue tracking.

Instructions

Create a new JIRA instance configuration.

Args: url: JIRA instance URL username: JIRA username password: JIRA API token or password default_issue_type: Default issue type for new issues epic_name_id: Custom field ID for epic name open_status_key: Transition ID for opening issues close_status_key: Transition ID for closing issues info_mapping_severity: JIRA priority for Info severity low_mapping_severity: JIRA priority for Low severity medium_mapping_severity: JIRA priority for Medium severity high_mapping_severity: JIRA priority for High severity critical_mapping_severity: JIRA priority for Critical severity

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlYes
passwordYes
usernameYes
epic_name_idNo
open_status_keyNo
close_status_keyNo
default_issue_typeNoBug
low_mapping_severityNoLow
high_mapping_severityNoHigh
info_mapping_severityNoLowest
medium_mapping_severityNoMedium
critical_mapping_severityNoHighest

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden for a creation/mutation tool. It does not disclose whether credentials are stored, whether the tool validates a live JIRA connection, what side effects occur, or what permissions are needed. Only the parameter list adds any substance, which is semantic rather than behavioral.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose statement is front-loaded in a single line, followed by a clean Args block. Given the 0% schema coverage, enumerating the parameters earns its place. It is slightly list-heavy but wastes no words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. For a 12-parameter mutation tool with no annotations, the parameter documentation is adequate but the description omits prerequisites, auth expectations, and side-effect behavior, leaving meaningful gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, the description must compensate and largely does: it explains all 12 parameters, including non-obvious ones like epic_name_id ('Custom field ID for epic name'), open/close_status_key ('Transition ID'), and the severity-to-priority mappings. It adds real meaning beyond the bare schema titles, though it omits format details (e.g., expected URL format, integer ID ranges).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a clear specific verb and resource: 'Create a new JIRA instance configuration.' An agent can distinguish this from read siblings like get_jira_instance and list_jira_instances. However, it does not explicitly name or contrast with those siblings, so it earns a 4 rather than 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use guidance, no prerequisites (e.g., required JIRA server access or admin permissions), and no mention of alternatives such as get_jira_instance or list_jira_instances. The description simply asserts what the tool does without helping the agent decide when to select it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.