Skip to main content
Glama
dcianciulli

DefectDojo MCP Server

by dcianciulli

list_endpoint_status

Retrieve endpoint statuses in DefectDojo to see how endpoints relate to findings, with filters for endpoint ID, finding ID, mitigated status, and pagination.

Instructions

List endpoint statuses (relationship between endpoints and findings).

Args: endpoint_id: Filter by endpoint ID finding_id: Filter by finding ID mitigated: Filter by mitigated status limit: Results per page offset: Pagination offset

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
limitNo
offsetNo
mitigatedNo
finding_idNo
endpoint_idNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It does not state that this is a read-only operation, mention permission/auth requirements, or describe pagination defaults or ordering. Only the incidental 'limit'/'offset' params hint at paging.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The one-line purpose is front-loaded and waste-free, but the Args block is low-value filler that mostly echoes parameter names, and there is no additional context to justify the structure. Adequate, not tight.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The presence of an output schema means return values need not be explained. However, with zero schema coverage and no annotations, the description is thin on behavior and defaults for a five-parameter list tool, leaving the agent with only the bare minimum to invoke it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the Args block is the only documentation. It lists all five parameters, but entries like 'Filter by endpoint ID' and 'Filter by finding ID' largely restate the parameter names; only 'Results per page' and 'Pagination offset' add real meaning. It fills the gap minimally rather than fully compensating.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a clear verb+resource ('List endpoint statuses') and clarifies the concept with the parenthetical '(relationship between endpoints and findings)', which helps distinguish it from list_endpoints and list_findings. It does not, however, explicitly name a sibling it is not, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use or when-not-to-use guidance. Given the many sibling list tools (list_endpoints, list_findings, get_endpoint), the description never says when an agent should reach for this relationship view instead of another call. Usage is only implied by the name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.