Trivy

Trivy MCP Server Plugin

This plugin starts a Model Context Protocol (MCP) server that integrates Trivy's security scanning capabilities with VS Code and other MCP-enabled tools.

Features

• Natural Language Scanning: Ask questions about security issues in natural language
• Multiple Scan Types:
  • Filesystem scanning for local projects
  • Container image vulnerability scanning
  • Remote repository security analysis
• Integration with Aqua Platform: Optional integration with Aqua Security's platform for enhanced scanning capabilities
• Flexible Transport: Support for both stdio and SSE (Server-Sent Events) transport protocols
• VS Code Integration: Seamless integration with VS Code's chat interface

Installing the plugin

To install the plugin you can use Trivy's plugin management system

The will install the latest version of the plugin

Starting the plugin

You're now ready to start the plugin, this will launch an MCP server that Cursor or VSCode can interact with. For now, the instructions will focus on VSCode

Available Options

Authentication

The MCP Server supports integration with Aqua Platform through the auth subcommand:

Available Auth Options

After configuring credentials, you can use Aqua Platform features by starting the server with the --use-aqua-platform flag:

Credentials are securely stored in the platform specific key chain.

Configuring the MCP Server in VSCode

Now, we need to configure the server in VSCode to start using as an agent

Prereqs

• >= version 1.99.0 of VS Code

Configuring the plugin

You can configure the Trivy mcp to start itself or use the sse http endpoint

Configuring for stdio

1. In VS Code, press F1
2. Search for "Preferences: Open User Settings (JSON)"
3. Find or create the "mcp" block and add a server as below
   "mcp": { "servers": { "Trivy MCP": { "command": "trivy", "args": [ "mcp", "-t", "stdio" ] } } }
4. When you save, an annotation will appear to Start the server

Configuring for SSE HTTP

1. Start the MCP Server
   trivy mcp -t sse -p 23456
2. In VS Code, press F1
3. Search for "Preferences: Open User Settings (JSON)"
4. Find or create the "mcp" block and add a server as below
   "mcp": { "servers": { "Trivy SSE": { "type": "sse", "url": "http://localhost:23456/sse" } } }
5. When you save, an annotation will appear to Start the server

Example Queries

Local Project Analysis

Container Image Scanning

Repository Analysis

Advanced Usage