MCP Semgrep Scanner

@archimedes-market

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

archimedes-market

提交者

Emmanuel “CUBE” Kubikus

关于 MCP Semgrep Scanner

Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-

#mcp #semgrep #security #static-analysis #sast #devsecops #mcp-server

MCP Semgrep Scanner 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "semgrep-scanner": {
      "command": "mcp-semgrep-scanner",
      "args": [
        "serve"
      ]
    }
  }
}

MCP Semgrep Scanner 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Mcp Semgrep Scanner?

Mcp Semgrep Scanner enables AI agents to run Semgrep static analysis on code. It surfaces OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs, with baseline scanning that filters output to newly-introduced findings to reduce noise.

How to use Mcp Semgrep Scanner?

Configure the server in your MCP client to run Semgrep scanning commands. The server handles baseline scanning to focus results on new findings.

Key features of Mcp Semgrep Scanner

Run Semgrep static analysis from an AI agent.
Surface OWASP top-10 findings.
Detect secrets and supply-chain issues.
Apply custom rule packs.
Baseline scanning reduces noise on new findings.

Use cases of Mcp Semgrep Scanner

AI-assisted code review for OWASP vulnerabilities.
Automated secret detection during development.
Supply-chain risk analysis in CI/CD pipelines.
Custom rule enforcement via AI agents.
New-code baseline scanning to filter pre-existing issues.

常见问题

What does Mcp Semgrep Scanner do?

It runs Semgrep static analysis from an AI agent, surfacing OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs.

What is baseline scanning?

Baseline scanning focuses output on newly-introduced findings so the noise floor stays low.

What is the license for Mcp Semgrep Scanner?

The server is licensed under MIT.

开发工具分类下的更多 MCP 服务器

Yocoolab

MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools

Official Porkbun MCP Server

Porkbun LLC

Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac

Modelglass

Modelglass turns "which model should I use?" into a lookup instead of a guess. Seven tools give your agent live pricing across image, language, video, and audio models. Sourced and versioned, not scraped once and forgott

TaskerArmy Agent

TaskerArmy

Ask Claude or ChatGPT what Shopify theme optimization tasks are pending on your store, a remote MCP server for TaskerArmy Agent accounts.

Capgo MCP

Cap-go

Console, Backend and CLI to manage Capgo Instant update and Native build for Capacitor apps Build and upload to app store your mobile app