Trustify MCP server

Integrates with Trustify supply chain security platforms to query SBOMs and packages, retrieve vulnerability information by CVE ID or PURL, analyze dependencies for security issues, and access advisory data for vulnerability management and compliance tracking.
Back to servers
Setup instructions
Provider
trustification
Release date
Jun 10, 2025
Stats
1 star

The MCP (Model Context Protocol) server implementation enables communication between Trustify instances and MCP clients like MCP Inspector and Claude Desktop. It supports multiple transport protocols including Stdio, SSE, and Streamable HTTP, allowing for flexible integration options.

Environment Configuration

Before running the MCP server, you need to configure the following environment variables to connect with a Trustify instance:

  • API_URL: Base URL of your Trustify instance
  • OPENID_ISSUER_URL: URL of the OpenID provider issuer
  • OPENID_CLIENT_ID: Client ID for the OpenID provider
  • OPENID_CLIENT_SECRET: Client secret for the OpenID provider

Stdio Transport

Building the Stdio Server

The Stdio transport is typically used by MCP clients that need a direct path to the MCP server binary:

cargo build --release --bin stdio

After building, the binary will be located at target/release/stdio. You can point MCP clients like MCP Inspector or Claude Desktop to this binary path.

SSE Transport

Running the SSE Server

To start the MCP server with SSE transport:

API_URL=<API URL> OPENID_ISSUER_URL=<OpenID Issuer URL> OPENID_CLIENT_ID=<OpenID Client ID> OPENID_CLIENT_SECRET=<OpenID Client secret> cargo run --release --bin sse

Once running, the SSE endpoint will be available at: http://localhost:8081/sse

Streamable HTTP Transport

Running the Streamable HTTP Server

To start the MCP server with Streamable HTTP transport:

API_URL=<API URL> OPENID_ISSUER_URL=<OpenID Issuer URL> OPENID_CLIENT_ID=<OpenID Client ID> OPENID_CLIENT_SECRET=<OpenID Client secret> cargo run --release --bin streamable

The Streamable HTTP endpoint will be available at: http://localhost:8082/mcp

How to install this MCP server

For Claude Code

To add this MCP server to Claude Code, run this command in your terminal:

claude mcp add-json "trustify" '{"command":"target/release/stdio","args":[],"environment":{"API_URL":"","OPENID_ISSUER_URL":"","OPENID_CLIENT_ID":"","OPENID_CLIENT_SECRET":""}}'

See the official Claude Code MCP documentation for more details.

For Cursor

There are two ways to add an MCP server to Cursor. The most common way is to add the server globally in the ~/.cursor/mcp.json file so that it is available in all of your projects.

If you only need the server in a single project, you can add it to the project instead by creating or adding it to the .cursor/mcp.json file.

Adding an MCP server to Cursor globally

To add a global MCP server go to Cursor Settings > Tools & Integrations and click "New MCP Server".

When you click that button the ~/.cursor/mcp.json file will be opened and you can add your server like this:

{
    "mcpServers": {
        "trustify": {
            "command": "target/release/stdio",
            "args": [],
            "environment": {
                "API_URL": "",
                "OPENID_ISSUER_URL": "",
                "OPENID_CLIENT_ID": "",
                "OPENID_CLIENT_SECRET": ""
            }
        }
    }
}

Adding an MCP server to a project

To add an MCP server to a project you can create a new .cursor/mcp.json file or add it to the existing one. This will look exactly the same as the global MCP server example above.

How to use the MCP server

Once the server is installed, you might need to head back to Settings > MCP and click the refresh button.

The Cursor agent will then be able to see the available tools the added MCP server has available and will call them when it needs to.

You can also explicitly ask the agent to use the tool by mentioning the tool name and describing what the function does.

For Claude Desktop

To add this MCP server to Claude Desktop:

1. Find your configuration file:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json
  • Linux: ~/.config/Claude/claude_desktop_config.json

2. Add this to your configuration file:

{
    "mcpServers": {
        "trustify": {
            "command": "target/release/stdio",
            "args": [],
            "environment": {
                "API_URL": "",
                "OPENID_ISSUER_URL": "",
                "OPENID_CLIENT_ID": "",
                "OPENID_CLIENT_SECRET": ""
            }
        }
    }
}

3. Restart Claude Desktop for the changes to take effect

Want to 10x your AI skills?

Get a free account and learn to code + market your apps using AI (with or without vibes!).

Nah, maybe later