Skip to main content
Glama
458,051 tools. Updated 2026-08-14 20:18

"Semgrep static analysis tool" matching MCP tools:

  • Run static code analysis on provided files using Semgrep to detect vulnerabilities and return findings in JSON format for detailed inspection and remediation.
    MIT
  • Run static application security testing on source code to detect vulnerabilities like SQL injection, XSS, and command injection. Returns CWE-classified findings with severity.
    Apache 2.0
  • Run comprehensive analysis on iOS targets: extract metadata, perform static analysis of binaries, and enable dynamic Frida hooks. Supports IPA, Mach-O, and bundle IDs with adjustable analysis levels.
    MIT
  • Analyze code for security vulnerabilities and unsafe patterns using static analysis. Leverages semgrep and bandit to identify issues, with configurable severity thresholds.
    MIT

Matching MCP Servers

  • A
    license
    B
    quality
    A
    maintenance
    A Model Context Protocol compliant server that integrates Semgrep static analysis tool with AI assistants like Anthropic Claude, enabling advanced code analysis, security vulnerability detection, and code quality improvements through a conversational interface.
    7
    80
    28
    MIT

Matching MCP Connectors

  • Scan code repositories for vulnerabilities using heuristic or Semgrep engines, generate JSON or SARIF reports, suppress false positives, and manage rule lists.
    Apache 2.0
  • Find available Semgrep static analysis rules, optionally filtering by programming language to discover security and code quality checks for your project.
    MIT
  • Scan a directory for security vulnerabilities and code quality issues using Semgrep static analysis. Specify the absolute directory path and optionally choose a rule configuration.
    MIT
  • Create a new Semgrep rule to detect code patterns by specifying a search pattern, target language, and message. Output the rule to a file for use in static analysis.
    MIT
  • Scores MCP tool docstrings against six quality dimensions to catch low-quality descriptions before publishing. Use as a CI gate for static analysis of Python files with @mcp.tool() decorators.
    MIT
  • Builds a static Storybook site for hosting, or returns setup guidance when Storybook is not configured.
    MIT
  • Identify disconnected components in the static import graph, grouping files that have no imports crossing group boundaries. Useful for detecting independent modules or clusters.
    MIT
  • Find BPS statistics content across static tables, publications, press releases, and indicators by keyword.
    MIT