広告掲載
MCP.so
ログイン

MCP Semgrep Scanner

@archimedes-market

リポジトリ

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

作者

archimedes-market

投稿者

Emmanuel “CUBE” Kubikus

MCP Semgrep Scanner について

Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-

#mcp#semgrep#security#static-analysis#sast#devsecops#mcp-server

MCP Semgrep Scanner の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "semgrep-scanner": {
      "command": "mcp-semgrep-scanner",
      "args": [
        "serve"
      ]
    }
  }
}

MCP Semgrep Scanner のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Mcp Semgrep Scanner?

Mcp Semgrep Scanner enables AI agents to run Semgrep static analysis on code. It surfaces OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs, with baseline scanning that filters output to newly-introduced findings to reduce noise.

How to use Mcp Semgrep Scanner?

Configure the server in your MCP client to run Semgrep scanning commands. The server handles baseline scanning to focus results on new findings.

Key features of Mcp Semgrep Scanner

  • Run Semgrep static analysis from an AI agent.
  • Surface OWASP top-10 findings.
  • Detect secrets and supply-chain issues.
  • Apply custom rule packs.
  • Baseline scanning reduces noise on new findings.

Use cases of Mcp Semgrep Scanner

  • AI-assisted code review for OWASP vulnerabilities.
  • Automated secret detection during development.
  • Supply-chain risk analysis in CI/CD pipelines.
  • Custom rule enforcement via AI agents.
  • New-code baseline scanning to filter pre-existing issues.

よくある質問

1

What does Mcp Semgrep Scanner do?

It runs Semgrep static analysis from an AI agent, surfacing OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs.

2

What is baseline scanning?

Baseline scanning focuses output on newly-introduced findings so the noise floor stays low.

3

What is the license for Mcp Semgrep Scanner?

The server is licensed under MIT.

コメント

「開発者ツール」の他のコンテンツ

LocalCan

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.

82

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

1

UXMachine

UXMachine

UXMachine measures a web page in a real browser and returns verifiable observations, each with its evidence and its limits. It opens the address on desktop (1280×800) and mobile (390×844) and follows the site's own links

Leadpages MCP

Leadpages

Leadpages MCP is a remote MCP server available at https://mcp.leadpages.com.

GripForge

gripforgeai

The tools your AI needs to make your games. Turn prompts into production-ready game assets — animated characters with their weapons attached, seamless textures, terrain, VFX, HUDs — and playable game kits Unity, Godot, U

1
広告掲載