"Fossa" matching MCP tools:

• fossa_manage_roleA

  fossa-mcpB

  Create, update, or delete a custom FOSSA role, setting its scope, name, description, and permissions.

  Apache 2.0

  Destructive

• fossa_block_packageA

  fossa-mcpB

  Block a package from FOSSA quality policies by adding a blocked-dependency rule. Specify package locator, optional versions, and policy IDs to enforce compliance.

  Apache 2.0

• fossa_assign_security_policy_to_projectsA

  fossa-mcpB

  Assign a single FOSSA security policy to multiple specified projects in one operation. Explicitly name each project locator; blank or empty lists are rejected to prevent unintended org-wide changes.

  Apache 2.0

• fossa_update_teamA

  fossa-mcpB

  Update a FOSSA team's name, default role, auto-add setting, or external identifier. Only the fields you provide are changed, leaving other settings untouched.

  Apache 2.0

• fossa_create_service_accountA

  fossa-mcpB

  Create a FOSSA service account, optionally issuing API tokens, and assign it to an organization role or team. Requires FOSSA admin and write permissions.

  Apache 2.0

• fossa_create_package_labelsA

  fossa-mcpB

  Create one or more package labels in FOSSA to categorize packages. Returns label IDs for later assignment to specific packages.

  Apache 2.0

• fossa_delete_org_settingA

  fossa-mcpB

  Delete a FOSSA organization's uploaded logo. This action clears the logo setting, useful for removing or replacing the current logo.

  Apache 2.0

  Destructive

• fossa_delete_oidc_trust_relationshipA

  fossa-mcpB

  Revoke an OIDC trust relationship to prevent its tokens from authenticating to FOSSA. Use for leaked or over-broad grants.

  Apache 2.0

  Destructive

• fossa_save_jira_configurationA

  fossa-mcpB

  Create or update Jira site configuration in FOSSA, enabling issue tracking integration. Configure credentials, fields, and project mappings to align Jira with FOSSA.

  Apache 2.0

• fossa_get_github_app_installation_urlA

  fossa-mcpB

  Retrieve the URL that a FOSSA administrator opens to install the FOSSA GitHub App on a GitHub organization. Read-only, returns the URL without installing anything.

  Apache 2.0

• fossa_update_release_group_releaseA

  fossa-mcpB

  Rename a FOSSA release group release and update its project list by adding, repinning, or removing projects.

  Apache 2.0

• fossa_list_rolesA

  fossa-mcpB

  List roles and permissions in a FOSSA organization, including which roles your token can assign.

  Apache 2.0

• fossa_update_team_assignmentsA

  fossa-mcpB

  Manage a FOSSA team's assigned users, projects, or release groups via add, remove, or replace actions.

  Apache 2.0

  Destructive

• fossa_update_team_group_assignmentsA

  fossa-mcpB

  Update a FOSSA team group's assignments by adding, removing, or replacing its member teams or users.

  Apache 2.0

  Destructive

• fossa_create_oidc_trust_relationshipA

  fossa-mcpB

  Create an OIDC trust relationship to grant workloads password-less login to FOSSA as a specified service account, verified by required claims.

  Apache 2.0

• fossa_apply_project_labelA

  fossa-mcpB

  Apply an existing organization label to specified projects in FOSSA. Provide the label ID and project locators to tag multiple projects at once.

  Apache 2.0

• fossa_delete_projectA

  fossa-mcpB

  Permanently delete a FOSSA project and all its scanned revisions, issues, and history. Requires write and destructive permissions; confirm the exact project locator first.

  Apache 2.0

  Destructive

• fossa_save_issue_filterA

  fossa-mcpB

  Create or update saved issue filters for FOSSA to streamline vulnerability, licensing, and quality analysis. Specify criteria and category to create, or filter_id to update existing filters.

  Apache 2.0

• fossa_update_release_groupA

  fossa-mcpB

  Update a FOSSA release group's title, policies, portal visibility, or report text. Only the fields you explicitly pass are changed; omitted fields keep their current values.

  Apache 2.0

• fossa_delete_release_groupA

  fossa-mcpB

  Delete a FOSSA release group and all its releases. Requires destructive write permissions; projects and scan history remain intact.

  Apache 2.0

  Destructive

• fossa_list_teamsA

  fossa-mcpB

  List FOSSA organization teams with roles, member counts, and owned projects/release groups. Supports search and pagination; optionally includes full member lists.

  Apache 2.0