Advertise
MCP.so
Sign In

MCP Semgrep Scanner

@archimedes-market

Repository

Basic information

Category

Developer Tools

Transports

stdio

Author

archimedes-market

Submitted by

Emmanuel “CUBE” Kubikus

About MCP Semgrep Scanner

Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-

#mcp#semgrep#security#static-analysis#sast#devsecops#mcp-server

MCP Semgrep Scanner config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "semgrep-scanner": {
      "command": "mcp-semgrep-scanner",
      "args": [
        "serve"
      ]
    }
  }
}

MCP Semgrep Scanner tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Mcp Semgrep Scanner?

Mcp Semgrep Scanner enables AI agents to run Semgrep static analysis on code. It surfaces OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs, with baseline scanning that filters output to newly-introduced findings to reduce noise.

How to use Mcp Semgrep Scanner?

Configure the server in your MCP client to run Semgrep scanning commands. The server handles baseline scanning to focus results on new findings.

Key features of Mcp Semgrep Scanner

  • Run Semgrep static analysis from an AI agent.
  • Surface OWASP top-10 findings.
  • Detect secrets and supply-chain issues.
  • Apply custom rule packs.
  • Baseline scanning reduces noise on new findings.

Use cases of Mcp Semgrep Scanner

  • AI-assisted code review for OWASP vulnerabilities.
  • Automated secret detection during development.
  • Supply-chain risk analysis in CI/CD pipelines.
  • Custom rule enforcement via AI agents.
  • New-code baseline scanning to filter pre-existing issues.

Frequently asked questions

1

What does Mcp Semgrep Scanner do?

It runs Semgrep static analysis from an AI agent, surfacing OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs.

2

What is baseline scanning?

Baseline scanning focuses output on newly-introduced findings so the noise floor stays low.

3

What is the license for Mcp Semgrep Scanner?

The server is licensed under MIT.

Comments

More Developer Tools MCP servers

Kilobat

seifip

Open-source Mac network diagnostics for AI agents and humans. Check connectivity, Wi-Fi, hotspots and traffic from the terminal or MCP.

Yocoolab

Yocoolab

MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools

1

TranscriptFetch MCP Server

TranscriptFetch

Model Context Protocol (MCP) server for TranscriptFetch: fetch YouTube transcripts, search, channels, and playlists from any MCP client.

AptiBuild AI — Career Intelligence

ParklandBuilds

AptiBuild AI — Career Intelligence MCP Server Structured career decision scaffolding for AI agents. Provides personality-conditioned business idea generation, official BLS OEWS wage data, FRED labor market signals, and

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

4
Advertise