Mcp Semgrep Scanner

@archimedes-market

About Mcp Semgrep Scanner

Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-

#mcp #semgrep #security #static-analysis #sast #devsecops #mcp-server

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "semgrep-scanner": {
      "command": "mcp-semgrep-scanner",
      "args": [
        "serve"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Mcp Semgrep Scanner?

Mcp Semgrep Scanner enables AI agents to run Semgrep static analysis on code. It surfaces OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs, with baseline scanning that filters output to newly-introduced findings to reduce noise.

How to use Mcp Semgrep Scanner?

Configure the server in your MCP client to run Semgrep scanning commands. The server handles baseline scanning to focus results on new findings.

Key features of Mcp Semgrep Scanner

Run Semgrep static analysis from an AI agent.
Surface OWASP top-10 findings.
Detect secrets and supply-chain issues.
Apply custom rule packs.
Baseline scanning reduces noise on new findings.

Use cases of Mcp Semgrep Scanner

AI-assisted code review for OWASP vulnerabilities.
Automated secret detection during development.
Supply-chain risk analysis in CI/CD pipelines.
Custom rule enforcement via AI agents.
New-code baseline scanning to filter pre-existing issues.

FAQ from Mcp Semgrep Scanner

What does Mcp Semgrep Scanner do?

It runs Semgrep static analysis from an AI agent, surfacing OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs.

What is baseline scanning?

Baseline scanning focuses output on newly-introduced findings so the noise floor stays low.

What is the license for Mcp Semgrep Scanner?

The server is licensed under MIT.

Frequently asked questions

What does Mcp Semgrep Scanner do?

It runs Semgrep static analysis from an AI agent, surfacing OWASP top-10 findings, secrets, supply-chain issues, and custom rule packs.

What is baseline scanning?

Baseline scanning focuses output on newly-introduced findings so the noise floor stays low.

What is the license for Mcp Semgrep Scanner?

The server is licensed under MIT.

Comments

Basic information

More Developer Tools MCP servers

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

AptiBuild AI — Career Intelligence

ParklandBuilds

AptiBuild AI MCP Server — career, labor market, and business idea intelligence for AI agents. 11 tools covering real-time FRED labor market signals, BLS wage data (126 occupations), AI-generated app ideas, career paths,

Altronis

sypherin

MCP server + CLI for Altronis — Singapore AI consulting. Ask the Lyra consultant, generate a grant-matched AI transformation plan, pull curated SG AI events/news. Read-only, wraps altronis.sg.

Reelier

Maxime Houle

Agents make claims. Reelier writes receipts — record an agent's tool-call workflow once, replay it deterministically at 0 tokens, and diff runs to catch drift.

Air Pipe

airpipe

Build, validate, deploy — HTTP APIs, cron jobs, webhooks and MCP tools — from your AI client.