mcp-server-semgrep
If you are the rightful owner of mcp-server-semgrep and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.
MCP Server Semgrep integrates Semgrep with AI assistants for advanced code analysis and security.
MCP Server Semgrep is a Model Context Protocol compliant server that integrates the Semgrep static analysis tool with AI assistants like Anthropic Claude. It provides advanced code analysis, security vulnerability detection, and code quality improvements through a conversational interface. Inspired by the robustness of Semgrep and implementations by the Replit Team and stefanskiasan, this project has evolved with significant architectural changes for enhanced installation and maintenance. It offers holistic source code analysis, proactive error detection, continuous code quality improvement, and stylistic consistency. For security, it automates code verification for known vulnerabilities and allows for customized security rules. It also aids in project maintenance by providing 'live' documentation, reducing technical debt, and improving code reviews.
Features
- Direct integration with the official MCP SDK
- Simplified architecture with consolidated handlers
- Clean ES Modules implementation
- Efficient error handling and path validation for security
- Cross-platform compatibility (Windows, macOS, Linux)
Tools
scan_directory
Scan the source code to find potential problems
list_rules
Show available rules and supported languages
analyze_results
Detailed analysis of scan results
create_rule
Create custom Semgrep rules
filter_results
Filter results by various conditions
export_results
Export results in multiple formats
compare_results
Comparison of two sets of scan results