Enables cloning repositories for code analysis and scanning with Semgrep.
Supports working with Semgrep rules defined in YAML format, allowing for rule creation and management.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Semgrep MCP Server scan the current directory for security issues"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
A Model Context Protocol (MCP) server for integrating Semgrep into the development environment. This server enables static code analysis and the management of Semgrep rules directly via the MCP protocol.
# Repository klonen
git clone [repository-url]
cd semgrep-server
# Abhängigkeiten installieren
npm install
# Server bauen
npm run buildRelated MCP server: ACE-MCP
The server can be started in the following way:
# Produktionsmodus
npm start
# Entwicklungsmodus
npm run devThe server provides the following MCP tools:
scan_directory : Runs a Semgrep scan in a directory
list_rules : Lists available Semgrep rules
analyze_results : Analyzes the scan results
create_rule : Creates a new Semgrep rule
filter_results : Filters scan results according to various criteria
export_results : Exports scan results in various formats
compare_results : Compares two scan results
The project is written in TypeScript and uses the MCP SDK for the server implementation.
semgrep-server/
├── src/ # Quellcode
├── build/ # Kompilierte JavaScript-Dateien
├── test.js # Testdateien
└── test-rule.yaml # Beispiel Semgrep-RegelNode.js & npm
TypeScript
MCP SDK
Axios for HTTP requests
This project is licensed under the ISC License. See the LICENSE file for details.
This server cannot be deployed
Enable secure connectivity between Sentry issues and debugging data, and LLM clients, using a Model Context Protocol (MCP) server.
MCP server for Statsig API - interact with Statsig's feature flags, experiments, and analytics
MCP server for interacting with the Supabase platform
Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.
