Trivy MCP Server Plugin

@aquasecurity

Repository Homepage

Basic information

About Trivy MCP Server Plugin

Trivy plugin for starting an MCP server

#trivy#mcp #security

Trivy MCP Server Plugin config

No standard config provided

This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.

Repository

Trivy MCP Server Plugin tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Trivy MCP Server Plugin?

Trivy MCP Server Plugin starts a Model Context Protocol (MCP) server that integrates Trivy's security scanning capabilities with VS Code and other MCP-enabled tools, allowing users to ask security-related questions in natural language.

How to use Trivy MCP Server Plugin?

Install the plugin with trivy plugin install mcp, then start the server with trivy mcp. After configuring your IDE, you can ask natural language security questions such as "Are there any vulnerabilities or misconfigurations in this project?"

Key features of Trivy MCP Server Plugin

Natural language scanning for security issues
Filesystem scanning for local projects
Container image vulnerability scanning
Remote repository security analysis
Optional integration with Aqua Security’s platform
Support for stdio, streamable HTTP, and SSE transports

Use cases of Trivy MCP Server Plugin

Scan a local project’s filesystem for vulnerabilities and misconfigurations
Analyze container images for known security issues
Audit remote repositories without cloning them locally
Ask security questions directly from VS Code, Cursor, JetBrains IDEs, or Claude Desktop

Frequently asked questions

What transport protocols does Trivy MCP Server Plugin support?

It supports stdio, streamable HTTP, and Server‑Sent Events (SSE) transport protocols.

Can I use it without the Aqua Platform?

Yes, the Aqua Platform integration is optional and only needed for enhanced scanning and assurance policy compliance.

How do I install the Trivy MCP Server Plugin?

Run `trivy plugin install mcp` in your terminal, then start the server with `trivy mcp`.

Which IDEs are supported?

The plugin works with VS Code, Cursor, JetBrains IDEs, and Claude Desktop.

Does the plugin require authentication?

Authentication is not required by default, but optional authentication is available for Aqua Platform integration (see the docs for details).

Comments

More Developer Tools MCP servers

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

LastPing

Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci

GripForge

gripforgeai

The tools your AI needs to make your games. Turn prompts into production-ready game assets — animated characters with their weapons attached, seamless textures, terrain, VFX, HUDs — and playable game kits Unity, Godot, U

SSH MCP Server

hypnosis

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

FARPY

mangomunchr

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP