Trent — Claude Code MCP server: what it does, how to install
This MCP server reviews code, plans, and configs, models threats across a repo or website, and tracks fixes when security work continues.
claude mcp add --transport http trent https://mcp.trent.ai/mcpWhat Trent does
Trent adds an AI security engineer to your coding agent through MCP. It can review a diff, plan, or configuration, scan a repository or website, and show the findings it receives. Its skills route these requests through trent-security-advisor, trent-threats, or trent-repo.
The /trent:trent-loop command works on a new branch, checks each change with your tests and Trent’s security advisor, then opens one pull request for review. Run it again after merging to rescan the merged code and continue with the remaining findings. Sign-in happens in a browser when a tool is used for the first time, so there is no API key to paste. The first tool call requires that browser sign-in.
What it helps with
- review a diff, plan, or config for security issues
- model threats across a repository
- scan a website and inspect its findings
- apply fixes on a new branch and open a pull request
- check which fixes count after a merge
Example prompts for the agent
- Review this diff for security issues with Trent.
- Build a threat model for this repository and show the findings.
- Run
/trent:trent-loop 3and fix at most three findings.
How to install Trent
Platform CLI: remote server
claude mcp add --transport http trent https://mcp.trent.ai/mcpPlatform CLI: remote server
codex mcp add trent --url https://mcp.trent.ai/mcpConfig file
{
"mcpServers": {
"trent": {
"url": "https://mcp.trent.ai/mcp"
}
}
}Config file
{
"servers": {
"trent": {
"type": "http",
"url": "https://mcp.trent.ai/mcp"
}
}
}Platform CLI: remote server
gemini mcp add -t http trent https://mcp.trent.ai/mcpStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about Trent
How do I install Trent in Claude Code?
Run claude mcp add --transport http trent https://mcp.trent.ai/mcp.
What does Trent do?
It reviews code, plans, and configs, scans repositories or websites for threats, and tracks remediation through a branch and pull request workflow.
Does Trent need an API key?
No. The first tool call opens browser authentication, and no API key is added to the setup.
