--- title: "Trivy MCP: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/aquasecurity-trivy-mcp/ description: "Aqua Security plugin that exposes Trivy scans to MCP clients for a local filesystem, a container image, or a remote repository." --- # Trivy MCP: review, setup & limitations · Undominated.ai > Aqua Security plugin that exposes Trivy scans to MCP clients for a local filesystem, a container image, or a remote repository. [← Explore all mcp servers](/mcp-servers/) CODE SECURITY / Aqua Security # Trivy MCP Aqua Security plugin that exposes Trivy scans to MCP clients for a local filesystem, a container image, or a remote repository. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/aquasecurity/trivy-mcp/tree/076c9b4ed23b460a598ba6b3fe644ad73e737113) SOURCE REVIEW Reviewed 2026-10-14 Evidence 3 linked sources Publisher Aqua Security Licence [MIT ↗](https://github.com/aquasecurity/trivy-mcp/blob/076c9b4ed23b460a598ba6b3fe644ad73e737113/LICENSE) Revision 076c9b4ed23b [Read what was—and wasn’t—checked ↓](#review) “Installs as a Trivy plugin, starts with trivy mcp, and defaults to stdio while also documenting streamable HTTP and SSE.” [Aqua Security · upstream description ↗](https://github.com/aquasecurity/trivy-mcp/blob/076c9b4ed23b460a598ba6b3fe644ad73e737113/README.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The catalogue has Semgrep and Snyk-style security servers and no Trivy MCP server. - The README names filesystem, image, and remote repository scans rather than a single generic scan. ### A good fit for - Asking about vulnerabilities in a local project - Scanning a container image from an MCP client ### Weigh up before choosing - This review did not execute it. - This review did not install the plugin or start trivy mcp. - Individual tool identifiers were not read from source, so only the scan types in the README are named. - Streamable HTTP and SSE are documented, and only stdio is recorded in transports because that is the default the quick start names as stdio. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - README.md - docs/quickstart.md - LICENSE ### Our findings - The README lists filesystem scanning, container image scanning, remote repository analysis, and optional Aqua Platform assurance. - docs/quickstart.md says the default transport is stdio and that --transport accepts streamable-http, sse, and stdio, with host localhost and port 23456 for network modes. - The quick start says --use-aqua-platform defaults to false. This review did not run a scan. ### Not established by this review - The server was not started. - No scan tool was called. - trivy plugin install mcp was not run. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. [Upstream setup instructions ↗](https://github.com/aquasecurity/trivy-mcp/blob/076c9b4ed23b460a598ba6b3fe644ad73e737113/README.md) DOCUMENTED COMMAND trivy plugin install mcp Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - The README quick start is that install line, then trivy mcp. - Network transports are documented in docs/quickstart.md as separate trivy mcp --transport lines. ### Before you start - The Trivy CLI - An MCP client that can launch a local stdio server ### Compatibility VS Code · Cursor · JetBrains · Claude Desktop ### Transports stdio ### Local scanner, optional Aqua platform - Read the local filesystem for a project scan - Scan a container image or remote repository when asked - Send results to Aqua Platform only if --use-aqua-platform is enabled ### Cost model MIT, copyright 2021 Aqua Security; Aqua Platform is optional and was not enabled 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Trivy MCP README ↗](https://github.com/aquasecurity/trivy-mcp/blob/076c9b4ed23b460a598ba6b3fe644ad73e737113/README.md) Checked 2026-10-14 https://github.com/aquasecurity/trivy-mcp/blob/076c9b4ed23b460a598ba6b3fe644ad73e737113/README.md Supports: scan types and install line - [Quick start ↗](https://github.com/aquasecurity/trivy-mcp/blob/076c9b4ed23b460a598ba6b3fe644ad73e737113/docs/quickstart.md) Checked 2026-10-14 https://github.com/aquasecurity/trivy-mcp/blob/076c9b4ed23b460a598ba6b3fe644ad73e737113/docs/quickstart.md Supports: stdio default and other transports - [MIT LICENSE ↗](https://github.com/aquasecurity/trivy-mcp/blob/076c9b4ed23b460a598ba6b3fe644ad73e737113/LICENSE) Checked 2026-10-14 https://github.com/aquasecurity/trivy-mcp/blob/076c9b4ed23b460a598ba6b3fe644ad73e737113/LICENSE Supports: MIT grant KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Semgrep CLI MCP ↗ Run Semgrep scans and inspect rule or platform findings through the maintained MCP server inside the Semgrep CLI.](/mcp-servers/semgrep-cli/)[### Snyk Studio MCP ↗ Invoke Snyk source, dependency, configuration and package-health checks through its CLI-integrated MCP server.](/mcp-servers/snyk/)[### SonarQube MCP Server ↗ Inspect SonarQube issues and quality gates, with optional analysis and write tools controlled by toolsets and read-only mode.](/mcp-servers/sonarqube/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Inspect resource evidence](/tools/) - [Choose a host](/agents/) - [Inspect reusable workflows](/skills/) - [Use Undominated data](/api/)