grype mcp server
About
Grype mcp server is a wrapper that exposes Anchore Grype’s vulnerability scanning capabilities through the Model Context Protocol (MCP). It allows developers to scan container images and file systems for known vulnerabilities directly from MCP‑compatible IDEs such as Cursor or…
Details
- Author
- ahmetak4n
- GitHub stars
- 3
- Downloads
- 300
- Categories
- Other
Jump to
- Integrates Grype’s vulnerability scanner into MCP‑compatible IDEs
- Scans container images and file systems for known vulnerabilities
- No need to leave the IDE to use Grype
- Shows vulnerable packages and their locations
- Uses the full Grype vulnerability database
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
grype mcp serverCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install the Grype CLI as a prerequisite. Then add the MCP server configuration to your MCP client (e.g., in claude_desktop_config.json or Cursor’s MCP settings) with command: "node" and args: ["${GRYPE_MCP_SERVER_PATH}/index.ts"]. Launch the IDE and invoke the scanner through its MCP interface.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"grype mcp server": {
"grype-mcp-server": {
"command": "node",
"args": [
"${GRYPE_MCP_SERVER_PATH}/index.ts"
]
}
}
}
}
McpServers
{
"grype-mcp-server": {
"command": "node",
"args": [
"${GRYPE_MCP_SERVER_PATH}/index.ts"
]
}
}
grype mcp server
Grype is a vulnerability scanner for container images and file systems. Security teams use grype easily but developers can struggle while using it to finding vulnerable packages or their locations. Grype mcp server allows developers to easily use the grype tool with IDE like Cursor or Claude Desktop.Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.



