Skip to main content
Glama
72,476 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"Semgrep static analysis tool" matching MCP servers:

  • MCP Server Semgrep

    VetCoders
    A
    license
    B
    quality
    A
    maintenance
    A Model Context Protocol compliant server that integrates Semgrep static analysis tool with AI assistants like Anthropic Claude, enabling advanced code analysis, security vulnerability detection, and code quality improvements through a conversational interface.
    7
    80
    28
    MIT
  • Semgrep MCP Server by semgrep

    Semgrep MCP Serverofficial

    semgrep
    A
    license
    B
    quality
    F
    maintenance
    An MCP server that provides a comprehensive interface to Semgrep, enabling users to scan code for security vulnerabilities, create custom rules, and analyze scan results through the Model Context Protocol.
    6
    683
    MIT

  • SAST MCP Server

    Sengtocxoen
    A
    license
    -
    quality
    B
    maintenance
    Integrates 15+ static application security testing tools (Semgrep, Bandit, TruffleHog, etc.) with Claude Code AI, enabling automated vulnerability scanning and security analysis through natural language commands. Supports cross-platform operation with remote execution on dedicated security VMs.
    6
    MIT

  • AuditShield

    hujiaozhuzhu
    F
    license
    -
    quality
    C
    maintenance
    A three-layer MCP server that filters false positives from static analysis tools like Semgrep, Bandit, and Gosec using rule-based, context-aware, and ML-based filtering to reduce false positives in code audit results.
    1

  • pci-dss-mcp

    shyshlakov
    A
    license
    A
    quality
    B
    maintenance
    PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server. Every finding maps to a specific PCI DSS requirement ID. Taint-aware cardholder data flow analysis with PCI SSC FAQ semantics, designed to complement broad SAST tools like Semgrep and CodeQL - not replace them.
    15
    3
    MIT

  • teeshield

    teehooai
    A
    license
    A
    quality
    D
    maintenance
    Static security linter for MCP servers. Scans tool definitions for vulnerabilities (path traversal, SQL injection, SSRF), scores description quality, and auto-rewrites descriptions for safer agent tool selection.
    2
    10
    MIT

  • depguard

    mopanc
    A
    license
    A
    quality
    A
    maintenance
    MCP security server for AI coding agents. 12 tools: pre-install guardian, vulnerability audit, supply-chain attack detection via static code analysis, and CycloneDX 1.6 SBOM generation. Zero runtime dependencies.
    14
    38
    15
    Apache 2.0

  • shieldbot

    balasriharsha
    A
    license
    A
    quality
    C
    maintenance
    AI-powered security code review for Claude Code that runs multiple scanners (CodeQL, Semgrep, etc.) to detect vulnerabilities, secrets, and dependency CVEs, producing prioritized reports.
    2
    3
    MIT

  • BinDiff MCP Tool

    u21h2
    F
    license
    A
    quality
    C
    maintenance
    Enables binary comparison capabilities by leveraging IDA Pro and BinDiff to analyze similarities and differences between files. Users can perform automated function analysis to identify changed functions and compare original binaries against patched versions.
    1
    2
  • REMnux MCP Server by REMnux

    REMnux MCP Serverofficial

    REMnux
    A
    license
    A
    quality
    A
    maintenance
    Enables AI assistants to execute malware analysis tools on a REMnux system via Docker, SSH, or local connections. It provides automated file-type analysis, structured tool discovery, and security guardrails for streamlined malware investigation.
    12
    1,327
    113
    GPL 3.0
  • CallLint by calllint

    CallLintofficial

    calllint
    A
    license
    A
    quality
    A
    maintenance
    Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.
    6
    2
    Apache 2.0

  • Laraguard MCP

    ecr17dev
    A
    license
    A
    quality
    D
    maintenance
    A security audit server for Laravel projects that performs static code analysis, dependency CVE checks, and configuration audits. It enables developers to detect vulnerabilities like SQL injection and XSS while providing active attack simulations directly within MCP-compatible IDEs.
    8
    2
    AGPL 3.0

  • codesafer

    goldmembrane
    A
    license
    A
    quality
    C
    maintenance
    CodeSafer is an MCP server that scans AI-generated code for 9 categories of hidden security threats — including invisible Unicode, Trojan Source, homoglyphs, and rules file backdoors — using static analysis plus CodeBERT deep learning. Runs locally, free tier available.
    6
    35
    1
    MIT

  • SAST MCP Server

    Skyrxin
    A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to scan code for security vulnerabilities using multiple static analysis tools, with support for filtering, deduplication, and CI/CD integration.
    27
    2
    MIT

  • mcp-api-tools

    rog0x
    A
    license
    A
    quality
    D
    maintenance
    A comprehensive suite of HTTP and API testing tools that enables AI agents to perform requests, check endpoint health, and decode JWTs. It also provides utilities for URL parsing and detailed security analysis of HTTP response headers.
    5
    39
    MIT