Set up Trivy MCP in Continue

Container image scanning, filesystem vulnerability detection, and infrastructure misconfiguration analysis. Official Aqua Security implementation.

Locate the config file

Continue reads MCP server configuration from the following file:

~/.continue/config.yaml

Create this file if it does not already exist.

Add the following to your Continue config file:

yaml

mcpServers:
  - name: trivy-mcp
    command: trivy
    args:
      - mcp

No environment variables needed. Trivy MCP works out of the box without any API keys or tokens.

Restart Continue. Trivy MCP should appear in your MCP server list with 5 tools available.

This server adds approximately 2,500 tokens to your context window for tool definitions.