Trivy

Trivy MCP Server Plugin - EXPERIMENTAL WIP

This plugin starts an MCP Server that can be used as a gateway to Trivy

Installing the plugin

To install the plugin you can use Trivy's plugin management system

The will install the latest version of the plugin

Starting the plugin

You're now ready to start the plugin, this will launch an MCP server that Cursor or VSCode can interact with. For now, the instructions will focus on VSCode

Options

Along with the usual global flags supported by Trivy, the following flags are available for the MCP server. For now, you don't need to specify any of them

Configuring the MCP Server in VSCode

Now, we need to configure the server in VSCode to start using as an agent

Prereqs

• >= version 1.99.0 of VS Code

Configuring the plugin

You can configure the Trivy mcp to start itself or use the sse http endpoint

Configuring for stdio

1. In VS Code, press F1
2. Search for "Preferences: Open User Settings (JSON)"
3. Find or create the "mcp" block and add a server as below
   "mcp": { "servers": { "Trivy MCP": { "command": "trivy", "args": [ "mcp", "-t", "stdio" ] } } }
4. When you save, an annotation will appear to Start the server

Configuring for SSE HTTP

1. Start the MCP Server
   trivy mcp -t sse -p 23456
2. In VS Code, press F1
3. Search for "Preferences: Open User Settings (JSON)"
4. Find or create the "mcp" block and add a server as below
   "mcp": { "servers": { "Trivy SSE": { "type": "sse", "url": "http://localhost:23456/sse" } } }
5. When you save, an annotation will appear to Start the server

Some sample prompts

Filesystem scanning

With an open project, why not try;

Image scanning

You can ask about images to get information

Repository scanning

Find out about a remote repository