defaudit-mcp
Related Servers
Alternatives to defaudit-mcp
No user-submitted related servers found.
Related Servers
- AlicenseAqualityCmaintenanceEnables policy-first defensive security operations for MCP, providing repository and web-security analysis with controlled authorization, scoped execution, and auditability.9MIT
- AlicenseAqualityCmaintenanceEnables interaction with the public Digital Asset Scan API to analyze digital assets, list assets, retrieve methodology, and poll asynchronous analysis jobs over MCP.4MIT
- FlicenseNot gradedqualityCmaintenanceEnables querying SAST code quality and security data from SonarQube and Coverity Connect via MCP, including quality gates, issues, projects, streams, and defects.37 npm-
- FlicenseNot gradedqualityDmaintenanceEnables access to SonarQube code quality analysis through MCP, including issue searching, metrics retrieval, and quality gate status.-
- AlicenseAqualityDmaintenanceEnables test execution and management through MCP clients, allowing retrieval of projects, listing tests, executing tests with browser selection, and monitoring results.67 npmMIT
- AlicenseNot gradedqualityCmaintenanceEnables permission-preserving access to DefectDojo OSS via MCP, using the caller's own API token, with read tools, deterministic analytics and reporting, plus optional gated write and history tools.2AGPL 3.0
TDQS
Scored across 7 tools
Each tool targets a distinct action and resource: projects vs scans vs findings, with clear separation of listing, starting, reading status/results, and managing false positives. No overlap or ambiguity.
All tool names follow a consistent verb_noun pattern using snake_case (e.g., list_projects, start_scan, mark_false_positive). The pattern is uniform and predictable.
Seven tools cover the core scanning and false-positive management workflow without unnecessary bloat. The set is well-scoped for a security audit MCP server.
The surface covers project listing, scan initiation/status/results, and false-positive toggling. Minor gaps exist (e.g., no stop_scan or project creation), but the primary workflows are complete and no critical dead ends.