grype mcp server

by ahmetak4n

3 stars
300 downloads
Not rated
GitHub

About

Grype mcp server is a wrapper that exposes Anchore Grype’s vulnerability scanning capabilities through the Model Context Protocol (MCP). It allows developers to scan container images and file systems for known vulnerabilities directly from MCP‑compatible IDEs such as Cursor or…

Details

Author
ahmetak4n
GitHub stars
3
Downloads
300
Categories
Other

- Integrates Grype’s vulnerability scanner into MCP‑compatible IDEs
- Scans container images and file systems for known vulnerabilities
- No need to leave the IDE to use Grype
- Shows vulnerable packages and their locations
- Uses the full Grype vulnerability database

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name grype mcp server
    Command (node, npx, python, etc.)

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository

Install the Grype CLI as a prerequisite. Then add the MCP server configuration to your MCP client (e.g., in claude_desktop_config.json or Cursor’s MCP settings) with command: "node" and args: ["${GRYPE_MCP_SERVER_PATH}/index.ts"]. Launch the IDE and invoke the scanner through its MCP interface.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "grype mcp server": {
            "grype-mcp-server": {
                "command": "node",
                "args": [
                    "${GRYPE_MCP_SERVER_PATH}/index.ts"
                ]
            }
        }
    }
}

McpServers

{
    "grype-mcp-server": {
        "command": "node",
        "args": [
            "${GRYPE_MCP_SERVER_PATH}/index.ts"
        ]
    }
}

grype mcp server

Grype is a vulnerability scanner for container images and file systems. Security teams use grype easily but developers can struggle while using it to finding vulnerable packages or their locations. Grype mcp server allows developers to easily use the grype tool with IDE like Cursor or Claude Desktop.
No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.