Vision One
The Trend Vision One Model Context Protocol (MCP) Server enables natural language interaction between your favourite AI tooling and the Trend Vision One web APIs. This allows users to harness the power of Large Language Models (LLM) to interpret and
What is Vision One?
Vision One is a Model Context Protocol (MCP) server that allows AI assistants like Claude, Cursor, and VS Code to trend vision one model context protocol (mcp) server enables natural language interaction between your favourite ai tooling and the trend vision one web apis. this allows users to harness the power of...
The Trend Vision One Model Context Protocol (MCP) Server enables natural language interaction between your favourite AI tooling and the Trend Vision One web APIs. This allows users to harness the power of Large Language Models (LLM) to interpret and
This server falls under the Security category on MCPgee, the world's largest MCP server directory with 33,000+ servers.
Features
- The Trend Vision One Model Context Protocol (MCP) Server ena
Use Cases
Maintainer
Works with
Installation
Manual Installation
npx vision-oneConfiguration
Configuration Details
claude_desktop_config.json
Performance
Response Metrics
Resource Usage
How to Set Up and Use Vision One
The Trend Vision One MCP Server enables natural-language interaction between AI coding assistants and the Trend Micro Vision One security platform through its web APIs. With over 50 tools spanning Cloud Posture, Identity and Access Management, Workbench Alerts, Cyber Risk and Exposure Management, Email Security, Container Security, Endpoint Security, and Threat Intelligence, security analysts can query and triage threats using plain English instead of navigating multiple consoles. The server ships as a Docker image and operates in read-only mode by default to protect production environments.
Prerequisites
- Docker installed and running on your machine
- A Trend Vision One account with an API key (configured with minimal necessary permissions)
- Service credits allocated in your Vision One tenant
- An MCP-compatible client such as VS Code with GitHub Copilot, Claude Desktop, or Claude Code
- Network access to the appropriate Vision One regional endpoint
Obtain a Vision One API key
Log in to your Trend Vision One console, navigate to Administration > API Keys, and create a new key. Grant only the permissions required for your use case (read-only is recommended). Copy the key — it will be used as the TREND_VISION_ONE_API_KEY environment variable.
Pull the Docker image
The server is distributed as a container image from the GitHub Container Registry. Pull it with Docker before configuring your MCP client.
docker pull ghcr.io/trendmicro/vision-one-mcp-server:latestRun the server manually to verify connectivity
Test the server by running the Docker image directly. Replace YOUR_API_KEY with your Vision One API key and choose the correct region code (us, eu, au, jp, sg, in, or mea).
docker run -i --rm \
-e TREND_VISION_ONE_API_KEY=YOUR_API_KEY \
ghcr.io/trendmicro/vision-one-mcp-server \
-region us \
-readonly=trueConfigure your MCP client
Add the Vision One MCP server to your client configuration, passing the API key as an environment variable and specifying the correct region for your tenant.
{
"mcpServers": {
"vision-one": {
"command": "docker",
"args": [
"run", "-i", "--rm",
"-e", "TREND_VISION_ONE_API_KEY",
"ghcr.io/trendmicro/vision-one-mcp-server",
"-region", "us",
"-readonly=true"
],
"env": {
"TREND_VISION_ONE_API_KEY": "your-api-key-here"
}
}
}
}Restart your MCP client and verify available tools
After saving the configuration, restart Claude Desktop or reload your VS Code window. Ask your AI assistant to list the Vision One tools — you should see tools across Cloud Posture, Workbench, IAM, CREM, and more.
Vision One Examples
Client configuration (claude_desktop_config.json)
Full configuration for Claude Desktop running the Vision One MCP server via Docker in read-only mode against the US region.
{
"mcpServers": {
"vision-one": {
"command": "docker",
"args": [
"run", "-i", "--rm",
"-e", "TREND_VISION_ONE_API_KEY",
"ghcr.io/trendmicro/vision-one-mcp-server",
"-region", "us",
"-readonly=true"
],
"env": {
"TREND_VISION_ONE_API_KEY": "tmv1-xxxxxxxxxxxxxxxxxxxxxxxx"
}
}
}
}Prompts to try
Example prompts that leverage the Vision One MCP server's security tooling.
- "List all open Workbench alerts from the last 24 hours"
- "Show me the Cloud Posture findings for my AWS accounts"
- "What are the top 10 highest-risk devices in Cyber Risk and Exposure Management?"
- "List all endpoint sensors that haven't checked in within the past week"
- "Summarize recent email security detections and their threat categories"Troubleshooting Vision One
Docker container exits immediately with authentication error
Verify that TREND_VISION_ONE_API_KEY is set correctly and the key has not expired. Confirm you are using the -region flag that matches your Vision One tenant's region. API keys are region-specific.
Tools return empty results even though data exists in the console
Check that the API key has the correct permissions for the tool category you are querying. For example, Cloud Posture queries require the Cloud Posture permission scope. Review the Vision One API key permission matrix in the console under Administration > API Keys.
MCP client cannot connect to the Docker-based server
Ensure Docker is running and the image has been pulled. The server communicates over stdio (not a network port), so no port mapping is needed. If using VS Code, confirm you are in Copilot Agent Mode and the .mcp.json or settings.json entry uses the correct docker run arguments.
Frequently Asked Questions about Vision One
What is Vision One?
Vision One is a Model Context Protocol (MCP) server that trend vision one model context protocol (mcp) server enables natural language interaction between your favourite ai tooling and the trend vision one web apis. this allows users to harness the power of large language models (llm) to interpret and It connects AI assistants to external tools and data sources through a standardized interface.
How do I install Vision One?
Follow the installation instructions on the Vision One GitHub repository. Clone the repo, install dependencies, and add the server config to your AI client.
Which AI clients work with Vision One?
Vision One works with all major MCP-compatible AI clients including Claude Desktop, Claude Code, Cursor, VS Code (GitHub Copilot), Windsurf, and Cline.
Is Vision One free to use?
Yes, Vision One is open source and available under the MIT license. You can use it freely in both personal and commercial projects.
Vision One Alternatives — Similar Security Servers
Looking for alternatives to Vision One? Here are other popular security servers you can use with Claude, Cursor, and VS Code.
Casdoor
★ 13.6kAn open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
ghidraMCP
★ 9.0kAn Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through
HexStrike AI
★ 8.9kHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly b
IDA Pro MCP
★ 8.7kEnables AI-assisted reverse engineering in IDA Pro by providing tools to analyze binaries, decompile functions, manage comments, search patterns, and interact with the IDA database through natural language.
Anthropic Cybersecurity Skills
★ 6.6k754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platform
Hooker
★ 5.1k🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL u
Browse More Security MCP Servers
Explore all security servers available in the MCPgee directory. Each server includes setup guides for Claude, Cursor, and VS Code.
Set Up Vision One in Your Editor
Choose your AI client for step-by-step setup instructions.
Quick Config Preview
Add this to your claude_desktop_config.json or .cursor/mcp.json
Ready to use Vision One?
Browse our complete directory of 33,000+ MCP servers, read setup guides for your editor, and start building with the Model Context Protocol.