Skip to main content
Glama
anchore

Grype MCP Server

Official
by anchore
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Related Servers

Alternatives to Grype MCP Server

No user-submitted related servers found.

    Related Servers

    • MCP SBOM Server

      MCP-Mirror
      F
      license
      A
      quality
      Not graded
      maintenance
      Performs vulnerability scans using Trivy to generate Software Bill of Materials (SBOM) in CycloneDX format. It enables automated security auditing and dependency tracking through the Model Context Protocol.
      1
      -

    • cybermes-mcp

      Ridlo543
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI coding assistants and IDEs to run authorized offensive-security workflows over Model Context Protocol, including scope validation, reconnaissance, HTTP probing, secret and vulnerability scanning, playbook lookup, evidence management, and report generation.
      Apache 2.0

    • NIST NVD MCP Server

      Cyreslab-AI
      A
      license
      A
      quality
      C
      maintenance
      Enables AI agents to search, retrieve, and analyze vulnerability data from the NIST National Vulnerability Database through a comprehensive Model Context Protocol server.
      8
      8
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.7/5.0

    Scored across 9 tools

    Disambiguation5/5

    Each tool has a clearly distinct purpose: installation check, DB info, vulnerability details, three scan types (directory, image, PURL), search, and two update operations. No overlap.

    Naming Consistency5/5

    All tool names follow a consistent verb_noun pattern in snake_case (e.g., find_grype, scan_dir, update_db), making them predictable and easy to use.

    Tool Count5/5

    9 tools is well-scoped for a vulnerability scanning server: covering installation, scanning, searching, and updates without unnecessary bloat or missing essentials.

    Completeness4/5

    Covers core workflows: installation check, DB info, scanning (directory, image, PURL), vulnerability details, search, and updates. Minor gaps like returning raw scan results or listing installed packages, but not critical.

    Maintenance

    ActivityInactive
    ResponsivenessNo issues

    Resources