"Trivy" matching MCP servers:

• CodeInspectus

  Synvoya

  A

  license

  A

  quality

  A

  maintenance

  Local-first, zero-egress security scanner for AI-generated / "vibe-coded" JS/TS. Bundles Opengrep, Gitleaks & Trivy behind one CWE-keyed schema and adds AI-code-specific checks (client-side secret exposure, Supabase RLS, prompt-injection & LLM-output XSS sinks). No account, no telemetry.

  Updated 10 days ago (2026-08-05 05:49 UTC)

  6

  305

  39

  MIT

• Security Scanner MCP Server

  friendlygeorge

  A

  license

  A

  quality

  F

  maintenance

  Multi-engine container and system vulnerability scanning for AI agents. Wraps Trivy and Grype with cross-engine validation, SBOM generation, and IaC misconfiguration scanning.

  Updated 2 months ago (2026-06-23 00:43 UTC)

  15

  18

  MIT

• MCP Shamash

  NeoTecDigital

  F

  license

  B

  quality

  D

  maintenance

  Enables security auditing, penetration testing, and compliance validation with tools like Semgrep, Trivy, Gitleaks, and OWASP ZAP. Features strict project boundary enforcement and supports OWASP, CIS, and NIST compliance frameworks.

  Updated 6 months ago (2026-02-28 05:01 UTC)

  7

• mcp-security-toolkit

  teodorio95-portofolio

  A

  license

  -

  quality

  B

  maintenance

  An MCP server that wraps Trivy and Gitleaks to provide file system vulnerability and secret scanning as tools for AI agents, enabling local, free security analysis.

  Updated 2 months ago (2026-06-26 11:55 UTC)

  MIT

• ci-triage-mcp

  keresifon

  F

  license

  -

  quality

  C

  maintenance

  Exposes a Ci-mvp security-triage pipeline as chat tools for Claude Desktop, enabling on-demand queries of Trivy/Semgrep scan results stored in S3.

  Updated a month ago (2026-07-11 16:06 UTC)