Mcp Semgrep Scanner

@archimedes-market

关于 Mcp Semgrep Scanner

Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-

#mcp #semgrep #security #static-analysis #sast #devsecops #mcp-server

基本信息

分类

开发工具

传输方式

stdio

发布者

archimedes-market

提交者

Emmanuel “CUBE” Kubikus

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "semgrep-scanner": {
      "command": "mcp-semgrep-scanner",
      "args": [
        "serve"
      ]
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Mcp Semgrep Scanner?

Mcp Semgrep Scanner enables AI agents to run Semgrep static analysis on code. It surfaces OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs, with baseline scanning that filters output to newly-introduced findings to reduce noise.

How to use Mcp Semgrep Scanner?

Configure the server in your MCP client to run Semgrep scanning commands. The server handles baseline scanning to focus results on new findings.

Key features of Mcp Semgrep Scanner

Run Semgrep static analysis from an AI agent.
Surface OWASP top-10 findings.
Detect secrets and supply-chain issues.
Apply custom rule packs.
Baseline scanning reduces noise on new findings.

Use cases of Mcp Semgrep Scanner

AI-assisted code review for OWASP vulnerabilities.
Automated secret detection during development.
Supply-chain risk analysis in CI/CD pipelines.
Custom rule enforcement via AI agents.
New-code baseline scanning to filter pre-existing issues.

FAQ from Mcp Semgrep Scanner

What does Mcp Semgrep Scanner do?

It runs Semgrep static analysis from an AI agent, surfacing OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs.

What is baseline scanning?

Baseline scanning focuses output on newly-introduced findings so the noise floor stays low.

What is the license for Mcp Semgrep Scanner?

The server is licensed under MIT.

评论

开发工具分类下的更多 MCP 服务器

Huoshan Test

MCP Unity Editor (Game Engine)

Model Context Protocol (MCP) plugin to connect with Unity Editor — designed for Cursor, Claude Code, Codex, Windsurf and other IDEs

Sentry

modelcontextprotocol

Model Context Protocol Servers

Smithery CLI

Install, manage and develop MCP servers and skills for agents

nuxt-mcp / vite-plugin-mcp

MCP server helping models to understand your Vite/Nuxt app better.