SSyncDev

Cursor Trivy MCP Server

Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.

Local serverstdioPython★ 10

What is the Cursor Trivy MCP Server?

Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.

What it actually does

A Model Context Protocol (MCP) server that provides Trivy security scanning capabilities through a standardized interface.

  • 🔍 Project Scanning: Automatically scan your project directory for security vulnerabilities using Trivy
  • 🛠️ Automated Fixes: Automatically update vulnerable dependencies to secure versions
  • 📦 Multi-Package Support: Handles multiple package managers (Python, Node.js, Ruby, Go)

Configuration

  • Python 3.12 or higher - Trivy installed on your system:

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Configuration

  • Python 3.12 or higher - Trivy installed on your system:

Frequently asked questions

Cursor Trivy is a tool that uses Trivy to scan projects for security vulnerabilities and automatically update vulnerable dependencies. It's designed to integrate with the Cursor IDE for seamless security checks during development.

Alternatives to the Cursor Trivy MCP Server

NVD Database

Queries the NIST National Vulnerability Database (NVD) via its API.

DatabasesPython★ 14

3ilm-mcp

Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.

Security & Identity

A2adependencyinspector-mcp

Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi

Security & IdentityRemote

A2areplayreceipt-mcp

Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.

Security & IdentityRemote

Abp Io MCP

A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management

Developer ToolsTypeScript

Action1 MCP

Every Action1 endpoint, plus fleet-wide patch and vulnerability views across all your organizations.

Developer Tools