"Semgrep static analysis tool" matching MCP servers:

MCP security firewall (stdio): vet advertised tool definitions through static-scan → threat-feed → origin → pinning before they reach the model. Zero npm runtime deps. No secrets.

Enables scanning of Claude Code skills, plugins, or MCP servers for malware before installation via static analysis.

Institutional-grade quantitative stock analysis and research signals for AI agents via the Model Context Protocol (MCP).

Audits MCP tool descriptions for quality and reliability, scoring them 0-100, detecting smells, and providing rewritten versions for better agent accuracy.

Sentiment Analysis AI - MCP server providing AI-powered tools and automation by MEOK AI Labs

A fashion vertical MCP server providing tools for product SEO audits and trend analysis to integrate with AI agents like Claude, Cursor, and Codex.

Graph-based tool retrieval for LLM agents. Builds a tool graph from OpenAPI/MCP specs and retrieves multi-step workflows via hybrid search (BM25 + graph traversal + embedding), recovering accuracy from 12% to 82% with 79% fewer tokens. Also works as an MCP Proxy to aggregate multiple servers behind 3 meta-tools.

Enables analysis of YouTube videos using the Gemini API to generate summaries and answer specific questions via direct URLs. It supports standard videos and shorts, allowing users to interact with video content without requiring manual downloads.

MCP server that parses aviation accident reports (PDF/DOCX/TXT) and injects their content into extraction prompt templates for knowledge graph construction.

Security scanner for MCP servers that detects tool poisoning, shadowing, and other risks via static rules and semantic analysis. Exposes the scan_mcp_server tool for scanning MCP servers over stdio.

Static analysis engine that detects schema mismatches between data producers (like MCP servers) and consumers (like client code), preventing runtime errors by validating contracts at development time.

A stateful MCP server that provides persistent memory, deterministic static analysis, and evolving conventions for AI coding assistants.

Local static inspection of MCP and AI-agent tool manifests before attachment, reporting findings and missing evidence without executing proposed tools. Results do not establish runtime safety.

Enables agents to synthesize typed MCP tool schemas at runtime, validate Python ASTs for unsafe imports, compile sandboxed callable handlers, and hot-plug them into an active MCP runtime. It provides a zero-dependency, standard-library-only MCP server for safe just-in-time tool creation and execution.

Provides local static-analysis tools for Python that let coding agents trace call paths, branch guards, side effects, and change impact, producing citation-ready answers with explicit uncertainty signals.

Enables deterministic AST static analysis and call-graph auditing to identify orphaned functions, unreachable methods, and token-bloat clusters, producing refactoring plans that reduce context waste.

140+ T-SQL static code analysis rules for SQL Database Projects

Enables autonomous agents to automatically repair and guard tool-call schemas through deterministic AST analysis and parameter projection validation, ensuring reliable, schema-compliant interactions in MCP-compatible environments.

Security scanning MCP server. Semgrep integration, SARIF parsing, baseline diffing, framework-aware ruleset selection, and automated finding triage.

Enables agents and MCP-compliant clients to resolve tool execution graphs by scheduling calls as a topological dependency DAG, running independent tools in parallel batches while speculatively prefetching and evaluating arguments. This cuts latency and token burn by handling routine tool orchestration deterministically without extra LLM round-trips.