How to Use the Trend Micro MCP in Claude

Investigate security threats and audit assets using Trend Micro MCP Server within Claude Desktop.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Trend Micro MCP to Claude Desktop

Create your Vinkius account to connect Trend Micro to Claude Desktop and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Trend Micro with Claude Desktop

Ask AI about this MCP

ChatGPT

Claude

Perplexity

View all recent detections

Need a quick picture of what's going wrong? You can pull a list of all recent security detections with `list_recent_detections`. This shows you the raw data points, letting you know exactly which threats Vision One flagged. It’s perfect for initial triage. Use this information to then check specific alerts by calling `get_alert_details` right in your chat window.

Audit endpoint activity logs

Want to see what happened on a machine? Run `list_endpoint_activity_logs`. This searches the telemetry, giving you a timeline of events. You can then cross-reference that data by listing managed assets using `list_managed_endpoints`. This combination lets you build a full audit trail without ever touching a command line.

Search for suspicious objects

When investigating a bad URL or IP, start here. The tool `list_suspicious_objects` pulls data from threat intelligence. You get lists of URLs, IPs, and files flagged across the board. If you find something suspicious, use that context to check for corresponding alerts using `list_security_alerts`. It connects the dots between external threats and your internal environment.

Setup guide

Set up Trend Micro MCP in Claude Web or Desktop

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.
2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL: https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.
3

Start a conversation

Open a new chat. The Trend Micro MCP tools are available immediately — no restart needed.

Endpoint URL

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

No configuration file needed — paste the URL directly in the Claude web interface.

Available on Free (1 connector), Pro, Max, Team, and Enterprise plans.

Prerequisites

Claude Desktop installed (macOS or Windows)
Active Vinkius subscription with a valid endpoint token

1

Open Claude Desktop Settings

Click the menu icon at the top-left corner, go to Settings → Developer → Edit Config. This opens claude_desktop_config.json in your default text editor.
2

Paste the Trend Micro MCP configuration

Copy the JSON snippet on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Restart Claude Desktop

Close and reopen the application. Claude needs a full restart to load new MCPs — refreshing a conversation is not enough.
4

Verify the connection

Open a new conversation. Click the 🔌 icon at the bottom of the message input. You should see tools listed under trend-micro-mcp.

json

{
  "mcpServers": {
    "trend-micro-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Trend Micro. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Trend Micro now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Trend Micro MCP in Claude Desktop

The MCP Server brings Vision One telemetry directly into Claude. Your agent uses the tools to run queries, like `list_security_alerts`, and returns the data right in your chat interface for you to read.

Absolutely. You can search email activity or endpoint telemetry using tools like `list_email_activity_logs` and `list_endpoint_activity_logs`. This keeps your investigation contained within the chat context.

Yes, Claude Desktop supports running tools both locally and remotely. You can manage Trend Micro assets—like checking connectivity with `get_vision_one_account`—whether it’s on a remote endpoint or through your local machine.

This server primarily touches security event logs, including asset connection status (`get_vision_one_account`), email activity records, and raw threat intelligence on URLs/IPs.

Yes. The Vision One telemetry is exposed via an MCP Server. You add it through the Integrations settings to get immediate access to all 8 available tools from your client.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript