mcp-server-semgrep

mcp-server-semgrep

3.4

If you are the rightful owner of mcp-server-semgrep and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.

MCP Server Semgrep integrates Semgrep with AI assistants for advanced code analysis and security.

MCP Server Semgrep is a Model Context Protocol compliant server that integrates the Semgrep static analysis tool with AI assistants like Anthropic Claude. It provides advanced code analysis, security vulnerability detection, and code quality improvements through a conversational interface. Inspired by the robustness of Semgrep and implementations by the Replit Team and stefanskiasan, this project has evolved with significant architectural changes for enhanced installation and maintenance. It offers holistic source code analysis, proactive error detection, continuous code quality improvement, and stylistic consistency. For security, it automates code verification for known vulnerabilities and allows for customized security rules. It also aids in project maintenance by providing 'live' documentation, reducing technical debt, and improving code reviews.

Features

  • Direct integration with the official MCP SDK
  • Simplified architecture with consolidated handlers
  • Clean ES Modules implementation
  • Efficient error handling and path validation for security
  • Cross-platform compatibility (Windows, macOS, Linux)

Tools

  1. scan_directory

    Scan the source code to find potential problems

  2. list_rules

    Show available rules and supported languages

  3. analyze_results

    Detailed analysis of scan results

  4. create_rule

    Create custom Semgrep rules

  5. filter_results

    Filter results by various conditions

  6. export_results

    Export results in multiple formats

  7. compare_results

    Comparison of two sets of scan results