MCP.so
Sign In

Mcp Semgrep Scanner

@archimedes-market

Repository

About Mcp Semgrep Scanner

Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-

#mcp#semgrep#security#static-analysis#sast#devsecops#mcp-server

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "semgrep-scanner": {
      "command": "mcp-semgrep-scanner",
      "args": [
        "serve"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Mcp Semgrep Scanner?

Mcp Semgrep Scanner enables AI agents to run Semgrep static analysis on code. It surfaces OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs, with baseline scanning that filters output to newly-introduced findings to reduce noise.

How to use Mcp Semgrep Scanner?

Configure the server in your MCP client to run Semgrep scanning commands. The server handles baseline scanning to focus results on new findings.

Key features of Mcp Semgrep Scanner

  • Run Semgrep static analysis from an AI agent.
  • Surface OWASP top-10 findings.
  • Detect secrets and supply-chain issues.
  • Apply custom rule packs.
  • Baseline scanning reduces noise on new findings.

Use cases of Mcp Semgrep Scanner

  • AI-assisted code review for OWASP vulnerabilities.
  • Automated secret detection during development.
  • Supply-chain risk analysis in CI/CD pipelines.
  • Custom rule enforcement via AI agents.
  • New-code baseline scanning to filter pre-existing issues.

FAQ from Mcp Semgrep Scanner

What does Mcp Semgrep Scanner do?

It runs Semgrep static analysis from an AI agent, surfacing OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs.

What is baseline scanning?

Baseline scanning focuses output on newly-introduced findings so the noise floor stays low.

What is the license for Mcp Semgrep Scanner?

The server is licensed under MIT.

Frequently asked questions

What does Mcp Semgrep Scanner do?

It runs Semgrep static analysis from an AI agent, surfacing OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs.

What is baseline scanning?

Baseline scanning focuses output on newly-introduced findings so the noise floor stays low.

What is the license for Mcp Semgrep Scanner?

The server is licensed under MIT.

Comments

Basic information

Category

Developer Tools

Transports

stdio

Author

archimedes-market

Submitted by

Emmanuel “CUBE” Kubikus

More Developer Tools MCP servers

discoverGPT

Joe Monastiero

discoverGPT is visualAI's unified MCP gateway for AI commerce, exposing 29 tools across four capabilities on one canonical product catalog: trimodal search (natural-language, precise-color, and image-similarity), AI cata

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

1

Reelier

Maxime Houle

Agents make claims. Reelier writes receipts — record an agent's tool-call workflow once, replay it deterministically at 0 tokens, and diff runs to catch drift.

LocalCan

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.

82

Perfex CRM

themesic

Turn Perfex CRM into an AI-ready workspace. This MCP server exposes your full REST API to Claude, ChatGPT and any AI agent, so leads, invoices and tasks are one prompt away.

1