Trivy MCP

Aqua Security's Trivy plugin that runs as a Model Context Protocol server, exposing Trivy's scanning capabilities to AI assistants. Scans container images, filesystems, and repositories for vulnerabilities, misconfigurations, exposed secrets, and license issues, returning structured findings agents can triage and act on.

{
  "mcpServers": {
    "trivy": {
      "command": "npx",
      "args": []
    }
  }
}

{
  "type": "object",
  "required": [
    "image"
  ],
  "properties": {
    "image": {
      "type": "string",
      "description": "Container image reference (e.g. nginx:latest)"
    }
  }
}

{
  "type": "object",
  "required": [
    "path"
  ],
  "properties": {
    "path": {
      "type": "string",
      "description": "Filesystem path to scan"
    }
  }
}