Run static code analysis on provided files using Semgrep to detect vulnerabilities and return findings in JSON format for detailed inspection and remediation.
MIT
650,545 tools. Updated 2026-10-14 08:04
"Semgrep static analysis tool" matching MCP tools:
- Run static application security testing on local code: upload it to Kali, run Semgrep, Bandit, Gitleaks, and Graudit in parallel, then save a versioned report and delete uploaded code.MIT
- Scan a project directory with Semgrep to find security vulnerabilities across supported source code files. Reports issues by severity threshold.MIT No Attribution
- Retrieve a list of programming languages supported by Semgrep to ensure compatibility and targeted code analysis for security vulnerabilities.MIT
- Run static-analysis engines (Semgrep, Gitleaks, ShellCheck, Ruff, Actionlint) on a git changeset or explicit file list, returning normalized findings as review leads to validate against current code.AGPL 3.0
- Run comprehensive analysis on iOS targets: extract metadata, perform static analysis of binaries, and enable dynamic Frida hooks. Supports IPA, Mach-O, and bundle IDs with adjustable analysis levels.MIT
Matching MCP Servers
- AlicenseBqualityAmaintenanceA Model Context Protocol compliant server that integrates Semgrep static analysis tool with AI assistants like Anthropic Claude, enabling advanced code analysis, security vulnerability detection, and code quality improvements through a conversational interface.7143 npm28MIT
- AlicenseNot gradedqualityDmaintenanceRun Semgrep static analysis from an AI agent. OWASP top 10, secrets detection, custom rule packs, baseline scanning. Curated by Archimedes Market with a verified Trust Report.MIT
Matching MCP Connectors
- Multi Upload ToolOAuth
Publish and schedule videos to TikTok, YouTube Shorts, Instagram, Facebook, LinkedIn, Pinterest, Bluesky, Threads and X from Claude, Cursor or any MCP client. Upload once, post everywhere, track views in unified analytics, and retry failed posts. Official platform APIs only, free plan available. Docs: https://docs.multi-upload-tool.com/mcp
- static.mdOAuth
Markdown notes and whiteboards your AI agent can read and write.
- Analyze code for security vulnerabilities and unsafe patterns using static analysis. Leverages semgrep and bandit to identify issues, with configurable severity thresholds.MIT
- Scan codebases for security vulnerabilities with heuristic or Semgrep engines. Generate JSON or SARIF reports, suppress rules, and list available checks via the code knowledge graph.Apache 2.0
- Scan source code with Semgrep to detect security vulnerabilities. Passive analysis of workspace files using customizable rules.MIT
- Find available Semgrep static analysis rules, optionally filtering by programming language to discover security and code quality checks for your project.MIT
- Scan a directory for security vulnerabilities and code quality issues using Semgrep static analysis. Specify the absolute directory path and optionally choose a rule configuration.MIT
- Search static analysis findings by project, tool, rule, severity, or file path to quickly locate specific code issues.MIT
- Create a new Semgrep rule to detect code patterns by specifying a search pattern, target language, and message. Output the rule to a file for use in static analysis.MIT
- Analyze source code for security vulnerabilities using semgrep-powered static application security testing.MIT
- Check Semgrep analyzer availability, version, ruleset, and limits to diagnose why a scan is unavailable.-
- Run local static analyzers to detect type errors and security vulnerabilities, returning structured findings for code review.-
- Validate responsive design patterns with static CSS analysis and optional Playwright testing to flag missing media queries, fixed widths, or non-mobile-first patterns for CI checks.MIT
- Score MCP tool docstrings against 6 TDQS quality dimensions to catch low-quality descriptions before publication. Performs read-only static analysis on Python files via ast, with no side effects.MIT
- Submit an APK for static teardown analysis: upload a file or provide an HTTPS URL to enqueue a Tier 1 job covering manifest, permissions, signing, and SDK detection.MIT
- Find BPS statistics content across static tables, publications, press releases, and indicators by keyword.MIT
- Prove which scanner findings are exploitable and production-reachable by classifying SARIF 2.1.0 reports from CodeQL, Semgrep, Snyk, or Trivy.Apache 2.0