MCP server
Trivy MCP Server
- Maintainer
- Official · Aqua Security
- Runs
- See docs
- GitHub
- ★ 53, last push 2025-12-17 (checked 2026-10-24)
- License
- MIT
- Connects to
- Trivy
- DevHunt
- Aqua Security on DevHunt
Install the Trivy MCP Server
No one-line setup: it needs a build step, an app plugin or account details. Follow the README, then add it to your client the way the MCP setup guide shows for Claude Code, Claude Desktop / claude.ai, ChatGPT, Cursor, VS Code and others.
Security notes
Alternatives
- Burp Suiteofficial · ★ 1.3k
Use Burp Suite from an agent: send requests, read proxy history and scanner issues.
- SonarQubeofficial · ★ 672
Code quality and security issues, quality gates and metrics from SonarQube Cloud or Server.
- Socketofficial · ★ 137
Check npm, PyPI and other packages for supply-chain risk before the agent installs them.
- Auth0official · ★ 121
Manage Auth0 applications, APIs, actions, logs and forms from the agent.
- Oktaofficial · ★ 74
Self-hosted server to manage Okta users, groups, apps, policies and system logs.
- HashiCorp Vaultofficial · ★ 65
Read and write Vault secrets and manage mounts in HashiCorp Vault.
- 1Password Environmentsofficial
Local server in the 1Password app to manage project environment variables, with approval prompts.
- Clerkofficial
Hosted server to manage Clerk apps, users and domains, plus Clerk SDK snippets.
Comparing servers for one product? Trivy MCP servers
FAQ
What does the Trivy MCP Server do?+
Scan filesystems, images and repos for vulnerabilities and misconfigurations with Trivy.
Is the Trivy MCP server official?+
Official: built and maintained by Aqua Security.
What are the alternatives to the Trivy MCP server?+
Other security MCP servers: Burp Suite, SonarQube, Socket, Auth0 and Okta.