Trivy MCP Server Plugin
@aquasecurity
About Trivy MCP Server Plugin
Trivy plugin for starting an MCP server
Config
No standard config provided
This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.
RepositoryTools
No tools detected
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is Trivy MCP Server Plugin?
Trivy MCP Server Plugin starts a Model Context Protocol (MCP) server that integrates Trivy's security scanning capabilities with VS Code and other MCP-enabled tools, allowing users to ask security-related questions in natural language.
How to use Trivy MCP Server Plugin?
Install the plugin with trivy plugin install mcp, then start the server with trivy mcp. After configuring your IDE, you can ask natural language security questions such as "Are there any vulnerabilities or misconfigurations in this project?"
Key features of Trivy MCP Server Plugin
- Natural language scanning for security issues
- Filesystem scanning for local projects
- Container image vulnerability scanning
- Remote repository security analysis
- Optional integration with Aqua Security’s platform
- Support for stdio, streamable HTTP, and SSE transports
Use cases of Trivy MCP Server Plugin
- Scan a local project’s filesystem for vulnerabilities and misconfigurations
- Analyze container images for known security issues
- Audit remote repositories without cloning them locally
- Ask security questions directly from VS Code, Cursor, JetBrains IDEs, or Claude Desktop
FAQ from Trivy MCP Server Plugin
What transport protocols does Trivy MCP Server Plugin support?
It supports stdio, streamable HTTP, and Server‑Sent Events (SSE) transport protocols.
Can I use it without the Aqua Platform?
Yes, the Aqua Platform integration is optional and only needed for enhanced scanning and assurance policy compliance.
How do I install the Trivy MCP Server Plugin?
Run trivy plugin install mcp in your terminal, then start the server with trivy mcp.
Which IDEs are supported?
The plugin works with VS Code, Cursor, JetBrains IDEs, and Claude Desktop.
Does the plugin require authentication?
Authentication is not required by default, but optional authentication is available for Aqua Platform integration (see the docs for details).
Frequently asked questions
What transport protocols does Trivy MCP Server Plugin support?
It supports stdio, streamable HTTP, and Server‑Sent Events (SSE) transport protocols.
Can I use it without the Aqua Platform?
Yes, the Aqua Platform integration is optional and only needed for enhanced scanning and assurance policy compliance.
How do I install the Trivy MCP Server Plugin?
Run `trivy plugin install mcp` in your terminal, then start the server with `trivy mcp`.
Which IDEs are supported?
The plugin works with VS Code, Cursor, JetBrains IDEs, and Claude Desktop.
Does the plugin require authentication?
Authentication is not required by default, but optional authentication is available for Aqua Platform integration (see the docs for details).
Basic information
More Developer Tools MCP servers
MCP Unity Editor (Game Engine)
CoderGamesterModel Context Protocol (MCP) plugin to connect with Unity Editor — designed for Cursor, Claude Code, Codex, Windsurf and other IDEs
Unity MCP (Server + Plugin)
IvanMurzakAI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Efficient token usage, advanced tools. Any C# method may be turned into a tool by a single line. Works with Claude Code, Gemini, Copilot, Cursor and any other absolutely for fr
mcp-excalidraw
yctimlinMCP server and Claude Code skill for Excalidraw — programmatic canvas toolkit to create, edit, and export diagrams via AI agents with real-time canvas sync.
FastAPI-MCP
tadata-orgExpose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
Sentry
modelcontextprotocolModel Context Protocol Servers
Comments