mcpField
T
Trivy MCP Server Plugin

Trivy MCP Server Plugin

Local
trivy.devDeveloper Tools56Updated 45w ago
RepositoryVisit website

About Trivy MCP Server Plugin

Trivy MCP Server Plugin is a Trivy plugin that starts an MCP server, bringing Trivy's security scanning into VS Code and other MCP-enabled tools. It suits developers who want to ask security questions from within their editor.

Key features

  1. 01Natural language security questions
  2. 02Filesystem scanning for local projects
  3. 03Container image vulnerability scanning
  4. 04Remote repository security analysis
  5. 05stdio, streamable HTTP and SSE transports

Use cases

  1. 01Checking a project for vulnerabilities and misconfigurations in VS Code or Cursor
  2. 02Scanning local project directories or container images
  3. 03Querying the security status of remote repositories from Claude Desktop

MCP support

The project runs as an MCP server that exposes Trivy's scanning capabilities to MCP-compatible clients.

#trivy#mcp#security

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

No install method listed yet

We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.

Repository

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

Trivy MCP Server Plugin

GitHub All Releases

https://github.com/user-attachments/assets/125791b0-3164-4dcc-8fb3-e45481a9cbf7

This plugin starts a Model Context Protocol (MCP) server that integrates Trivy's security scanning capabilities with VS Code and other MCP-enabled tools.

Features

  • Natural Language Scanning: Ask questions about security issues in natural language
  • Multiple Scan Types:
    • Filesystem scanning for local projects
    • Container image vulnerability scanning
    • Remote repository security analysis
  • Integration with Aqua Platform: Optional integration with Aqua Security's platform for enhanced scanning capabilities and assurance policy compliance
  • Flexible Transport: Support for stdio, streamable HTTP, and SSE (Server-Sent Events) transport protocols
  • IDE Integration: Seamless integration with VS Code, Cursor, JetBrains IDEs, and Claude Desktop

Quick Start

Installation
trivy plugin install mcp
Starting the Server
trivy mcp

Documentation

For comprehensive documentation, please see the docs directory:

Example Query

After setting up the plugin and configuring your IDE, you can start asking security-related questions:

Are there any vulnerabilities or misconfigurations in this project?

For more examples, see the Example Queries page.

License

MIT License - see the LICENSE file for details.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.