Set up Trivy MCP in Claude Desktop

Container image scanning, filesystem vulnerability detection, and infrastructure misconfiguration analysis. Official Aqua Security implementation.

Locate the config file

Claude Desktop reads MCP server configuration from the following file:

~/Library/Application Support/Claude/claude_desktop_config.json

Create this file if it does not already exist.

Add the following to your Claude Desktop config file:

json

{
  "mcpServers": {
    "trivy-mcp": {
      "command": "trivy",
      "args": [
        "mcp"
      ]
    }
  }
}

No environment variables needed. Trivy MCP works out of the box without any API keys or tokens.

Restart Claude Desktop. Trivy MCP should appear in your MCP server list with 5 tools available.

This server adds approximately 2,500 tokens to your context window for tool definitions.