Skip to main content
Glama

Related Servers

Alternatives to defaudit-mcp

No user-submitted related servers found.

    Related Servers

    • A
      license
      A
      quality
      C
      maintenance
      Enables policy-first defensive security operations for MCP, providing repository and web-security analysis with controlled authorization, scoped execution, and auditability.
      9
      MIT
    • A
      license
      A
      quality
      C
      maintenance
      Enables interaction with the public Digital Asset Scan API to analyze digital assets, list assets, retrieve methodology, and poll asynchronous analysis jobs over MCP.
      4
      MIT
    • F
      license
      Not graded
      quality
      C
      maintenance
      Enables querying SAST code quality and security data from SonarQube and Coverity Connect via MCP, including quality gates, issues, projects, streams, and defects.
      37 npm
      -
    • A
      license
      Not graded
      quality
      C
      maintenance
      Enables permission-preserving access to DefectDojo OSS via MCP, using the caller's own API token, with read tools, deterministic analytics and reporting, plus optional gated write and history tools.
      2
      AGPL 3.0

    TDQS

    A3.9/5.0

    Scored across 7 tools

    Disambiguation5/5

    Each tool targets a distinct action and resource: projects vs scans vs findings, with clear separation of listing, starting, reading status/results, and managing false positives. No overlap or ambiguity.

    Naming Consistency5/5

    All tool names follow a consistent verb_noun pattern using snake_case (e.g., list_projects, start_scan, mark_false_positive). The pattern is uniform and predictable.

    Tool Count5/5

    Seven tools cover the core scanning and false-positive management workflow without unnecessary bloat. The set is well-scoped for a security audit MCP server.

    Completeness4/5

    The surface covers project listing, scan initiation/status/results, and false-positive toggling. Minor gaps exist (e.g., no stop_scan or project creation), but the primary workflows are complete and no critical dead ends.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues