Draugrofficial
A
licenseA
qualityA
maintenanceSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
6
13
9
Apache 2.0
Best Trivy MCP Servers
Trivy is a comprehensive open source vulnerability scanner for containers and other artifacts, maintained by Aqua Security.
Why this server?
Integrates Trivy as a scanner for container images, filesystem dependencies, and infrastructure-as-code configurations.
Why this server?
Allows ingesting Trivy SARIF scanner findings and proving which findings are reachable.
AlicenseAqualityBmaintenanceOfficial Codna MCP server with Mojo-powered risk simulation. Maps repos with zero LLM tokens. 5 stdio tools: triage, root-cause analysis and fix plans (optional PRs), SARIF reachability proof, on-device code memory and bug reporting. Introspection needs no credentials; execution requires a one-time free codna login. Source: cli/codna/mcp_server.py. Registry: io.github.thyn-ai/codna.5273 PyPIApache 2.0Why this server?
Ingests raw vulnerability and misconfiguration findings from Trivy scanner for deduplication and contextual scoring.
AlicenseBqualityAmaintenanceAn intelligent triage layer for Cloud Security Posture Management (CSPM). It ingests raw vulnerability and misconfiguration findings from tools like Trivy or Wiz, deduplicates overlapping issues, and uses a rules-based scoring engine (with an optional LLM integration) to output a prioritized, highly actionable ticket list.41MITWhy this server?
Integrates with Trivy to scan app folders for leaked passwords and keys, outdated libraries with known security vulnerabilities, and risky container configurations.
AppLedgerofficial
AlicenseAqualityBmaintenanceSecurity checks for apps built with AI: Trivy and Opengrep findings explained in plain English, with a fix request for your coding agent. Hosted scan by default (only files Git would commit, never secret files) or fully local.563 PyPIMITWhy this server?
Provides vulnerability scanning for Terraform configurations.
AlicenseAqualityBmaintenanceA Model Context Protocol (MCP) server for producing better Terraform through CLI analysis (tflint, checkov, trivy, kics, infracost), best-practice guidance from terraform-best-practices.com, cloud provider recommendations (Azure, AWS, GCP), and Terraform Registry resource and module guidance.18616 npm1MITWhy this server?
Provides access to Trivy for vulnerability scanning of containers, filesystems, and repositories, integrated into AI-driven security pipelines.
SecPipeofficial
FlicenseAqualityFmaintenanceEnables AI agents to orchestrate security research workflows by connecting to containerized security tools via MCP, allowing automated vulnerability analysis and pipeline execution.24803-Why this server?
Scans dependencies for license hits and HIGH/CRITICAL vulnerabilities via Trivy, returning findings alongside SBOM-based package inventories from Syft.
Why this server?
Scans Docker images and local filesystems for OS and library vulnerabilities, misconfigurations, and secrets using Trivy.
AlicenseAqualityCmaintenanceAI-powered security code review for Claude Code that runs multiple scanners (CodeQL, Semgrep, etc.) to detect vulnerabilities, secrets, and dependency CVEs, producing prioritized reports.23MITWhy this server?
Integrates Trivy vulnerability scanning for Java projects to detect CVEs and security issues in dependencies.
AlicenseBqualityDmaintenanceMaven MCP Server enables AI assistants to manage Maven dependencies through natural language, including version checking, security scanning, and dependency analysis.5MIT
