"Semgrep static analysis tool" matching MCP servers:

Run Semgrep static analysis from an AI agent. OWASP top 10, secrets detection, custom rule packs, baseline scanning. Curated by Archimedes Market with a verified Trust Report.

Performs explainable, deterministic static analysis of MCP tool metadata to detect misleading instructions, concealed capabilities, and schema drift without executing tools.

MCP security firewall (stdio): vet advertised tool definitions through static-scan → threat-feed → origin → pinning before they reach the model. Zero npm runtime deps. No secrets.

Enables scanning of Claude Code skills, plugins, or MCP servers for malware before installation via static analysis.

Enables local analysis of unstructured documents (PDF, DOCX, PPTX, SVG, PNG) by extracting text and structure with citation anchors, and verifies summaries against source material before a human approves saving a report.

Provides static analysis of ROS 2 workspaces, enabling inspection of packages, dependencies, interfaces, launch files, and robot descriptions without running ROS 2.

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server. Every finding maps to a specific PCI DSS requirement ID. Taint-aware cardholder data flow analysis with PCI SSC FAQ semantics, designed to complement broad SAST tools like Semgrep and CodeQL - not replace them.

A Model Context Protocol server that provides a scratchpad tool for LLMs to organize thoughts, take notes, and plan approaches to complex problems.

Static worst-case token-budget analysis for LLM-agent workflows using AST analysis to identify certifiable, default-dependent, non-certifiable, and runaway units, with optional signed budget certificates.

Self-hosted MCP engine for private code reviews, providing deterministic static analysis and AST-level search over diffs, with findings passed to a review agent of your choice.

Enables static analysis of Solidity smart contracts using Slither, including contract metadata, function details, inheritance, and security detectors through MCP tools.

Turns your PDFs into locally stored flashcards and quizzes, grades your answers, and schedules spaced-repetition reviews entirely on your machine.

Lifts machine code to VTIL intermediate language and emits pseudo-C for VM handler characterization. Complements concrete execution tools with static IL analysis.

AI-powered security code review for Claude Code that runs multiple scanners (CodeQL, Semgrep, etc.) to detect vulnerabilities, secrets, and dependency CVEs, producing prioritized reports.

Provides a no-op 'think' tool that enables Claude to decompose complex problems and enhance reasoning by pausing to organize thoughts.

FastMCP-based tool for extracting UI component code from Uiverse.io, supporting HTML/CSS, React, Vue, Svelte, and Lit frameworks.

A fashion vertical MCP server providing tools for product SEO audits and trend analysis to integrate with AI agents like Claude, Cursor, and Codex.

Enables static analysis of scripts without executing them, providing plain-English behavior explanations, decoded obfuscated content, IOC extraction, risk scoring, and MITRE ATT&CK mapping.

Central registry for AI tools with vector search and knowledge graph, enabling intelligent tool discovery, chaining, and execution via MCP.

Integrates Checkov, Semgrep, Bandit, and ASH to provide comprehensive code security analysis for AI coding assistants.