"Semgrep static analysis tool" matching MCP servers:

Run Semgrep static analysis from an AI agent. OWASP top 10, secrets detection, custom rule packs, baseline scanning. Curated by Archimedes Market with a verified Trust Report.

Integrates Checkov, Semgrep, Bandit, and ASH to provide comprehensive code security analysis for AI coding assistants.

Enables comprehensive GitHub PR reviews through Cursor's AI by fetching PR diffs, running static analysis tools (ESLint, Prettier, TypeScript, Semgrep), executing tests, and generating detailed code review reports with inline comments.

Enables AI coding agents to test C++ code by running static analysis, sanitizers (ASan, TSan, LSan, UBSan), and performance profiling through eight MCP tools.

Provides comprehensive code analysis through three MCP servers: static analysis for code quality and security, dependency analysis for package management and vulnerabilities, and complexity analysis for maintainability assessment across multiple programming languages.

Enables autonomous agents to automatically repair and guard tool-call schemas through deterministic AST analysis and parameter projection validation, ensuring reliable, schema-compliant interactions in MCP-compatible environments.

Enables verification of deployment-scoped model-visible DSH tool surface conformance by checking recorded tool identities and schemas against approved locks, reporting only drift categories and hashes.

Protects AI agents from bad tool outputs, schema mismatches, and tool poisoning by validating, sanitizing, and scoring reliability of tool responses.

Integrates 15+ static application security testing tools (Semgrep, Bandit, TruffleHog, etc.) with Claude Code AI, enabling automated vulnerability scanning and security analysis through natural language commands. Supports cross-platform operation with remote execution on dedicated security VMs.

A local MCP server that provides Sonar-grade static analysis (bugs, vulnerabilities, code smells) for TypeScript/JS and C# repositories, with CLI and dashboard support.

An MCP Server that provides access to Google's Cloud Tool Results API, enabling applications to programmatically interact with test results from Firebase Test Lab and mobile app testing through natural language.

Sentinel is an enterprise-grade security server that integrates tools like Semgrep, Trivy, and Gitleaks via Docker to perform automated vulnerability scanning and compliance checks. It enables users to conduct static analysis, secret detection, and AI-powered threat modeling directly through Model Context Protocol-compatible IDEs.

A lightweight multi-provider MCP testing fixture with two providers (eva_air and uk_railway), each exposing 5 tools using in-memory fake data, designed for verifying MCP client tool discovery, tool calls, and multi-provider routing.

A three-layer MCP server that filters false positives from static analysis tools like Semgrep, Bandit, and Gosec using rule-based, context-aware, and ML-based filtering to reduce false positives in code audit results.

This MCP server verifies that an agent’s claimed tool output matches the actual response returned by a tool to prevent invented or distorted results. It flags mismatches, omissions, and invented fields to ensure downstream logic only processes verified tool data.

MCP server exposing statistical regression testing for LLM agents as a "run" tool: p-value, effect size, and confidence interval on whether agent behavior actually changed.

Enables read-only analysis of FST waveform files, including signal value queries, timing measurements, event search, latency analysis, and PNG plot generation using human-readable time addressing.

MCP server for the Ghost Inspector API that lets agents inspect and manage end-to-end browser tests, offering read-only tools for inventory, module usage, and stale test analysis, plus opt-in guarded write operations.

MCP server exposing a "run" tool that benchmarks agent-memory backends and returns a reproducible JSON report.

Free MCP tools for context engineering audits of AI agents, offering on-demand analysis of system prompts, tool definitions, and context packing.