Semgrep

Created By

semgrepa year ago

# code-scanning

Overview Content Tools Comments

Overview

what is Semgrep?

Semgrep is a static analysis tool that allows developers to scan their code for security vulnerabilities and enforce coding standards using customizable rules.

how to use Semgrep?

To use Semgrep, you can install it via pip, run it on your codebase, and utilize its various scanning tools through the command line or Docker.

key features of Semgrep?

Scanning code snippets for security vulnerabilities
Customizable rules for different programming languages
Analyzing and filtering scan results
Exporting results in multiple formats (JSON, SARIF, text)

use cases of Semgrep?

Identifying security issues in code before deployment.
Enforcing coding standards across a development team.
Automating code reviews and quality checks.

FAQ from Semgrep?

Can Semgrep scan all programming languages?

Yes! Semgrep supports multiple programming languages and allows for custom rule creation.

Is Semgrep free to use?

Yes! Semgrep is open-source and free for everyone.

How can I customize rules in Semgrep?

You can create custom rules using the Semgrep rule syntax to match specific patterns in your code.

Try in Playground

Server Config

{
  "mcpServers": {
    "Semgrep": {
      "command": "uv",
      "args": [
        "run",
        "--with",
        "mcp",
        "mcp",
        "run",
        "server.py"
      ]
    }
  }
}

Project Info

Created At

a year ago

Updated At

a year ago

Author Name

semgrep

Star

-

Language

-

License

-

Category

developer-tools

Tags

Homepage

https://github.com/semgrep/mcp

Recommend Servers

Songcheck Ai Music Detector

@afghanfansmedia-ai

Is this song AI or human? SongCheck detects AI-generated music (Suno, Udio, and more) and media from any AI agent. Point it at an audio file, an image/video, or a whole music folder and it returns a verdict (LIKELY AI-GENERATED / UNCERTAIN / LIKELY HUMAN), an AI-probability score, confidence, and provenance signals (Content Credentials / SynthID watermark, generator hints). Tools: detect_ai_music, detect_ai_media, scan_catalog (audit an entire catalog), and songcheck_health. Free tier is 5 checks/day; a paid key unlocks unlimited catalog scans. Powered by SongCheck (Khaled Media), a self-hosted v9 ensemble detector.

7 days ago

Ghana Payments Mcp

@junter1989k-ai

13 days ago

高德地图官方 MCP Server

a year ago

@modelcontextprotocol

a year ago

Israel Payments Mcp

@junter1989k-ai

13 days ago

Denmark Payments Mcp

@junter1989k-ai

13 days ago

Canada Payments Mcp

@junter1989k-ai

13 days ago

@modelcontextprotocol

Location services, directions, and place details

a year ago

Pakistan Payments Mcp

@junter1989k-ai

13 days ago

Ukraine Payments Mcp

@junter1989k-ai

13 days ago

Rwanda Payments Mcp

@junter1989k-ai

13 days ago

302_sandbox_mcp

Create a remote sandbox that can execute code/run commands/upload and download files. 创建远程沙盒，可以执行代码/运行命令/上传下载文件

a year ago

GBOX Android MCP

GBOX provides environments for AI Agents to operate computer and mobile devices. Mobile Scenario: Your agents can use GBOX to develop/test android apps, or run apps on the Android to complete various tasks(mobile automation). Desktop Scenario: Your agents can use GBOX to operate desktop apps such as browser, terminal, VSCode, etc(desktop automation). MCP: You can also plug GBOX MCP to any Agent you like, such as Cursor, Claude Code. These agents will instantly get the ability to operate computer and mobile devices.

a year ago

Language models generate; Concordance verifies. The verify tool checks a claim deterministically (no model in the loop) and returns HOLDS / BROKEN / INCOMPLETE with the worked reasoning and a sealed receipt (content_hash + cite_url) that re-fetches byte-identical or not at all. Also: ranked search over an ~11k-record library, seal_fetch to re-verify any receipt, redact to strip PII before text travels, and a sealed connection graph. Runs sovereign/offline too (stdlib-first Python). A public false-positive benchmark covers every domain: the engine has never sealed a falsehood. 38 tools live; remote endpoint at https://narrowhighway.com/mcp.

13 days ago

EdgeOne Pages MCP

@TencentEdgeOne

An MCP service designed for deploying HTML content to EdgeOne Pages and obtaining an accessible public URL.

TypeScript

a year ago

Nepal Payments Mcp

@junter1989k-ai

13 days ago

Kazakhstan Payments Mcp

@junter1989k-ai

13 days ago

Latvia Payments Mcp

@junter1989k-ai

13 days ago

@modelcontextprotocol

Channel management and messaging capabilities

a year ago

Slovakia Payments Mcp

@junter1989k-ai

13 days ago

Serper MCP Server

A Serper MCP Server

Python

a year ago

Algeria Payments Mcp

@junter1989k-ai

13 days ago

@modelcontextprotocol

test

7 months ago

Austria Payments Mcp

@junter1989k-ai

13 days ago

@Henning Witzel-Acikgöz

Host the HTML or Markdown pages your AI generates and share each as a link with comments, versioning, and access control. Create, update, and organize pages and read reviewer comments over MCP.

13 days ago

Norway Payments Mcp

@junter1989k-ai

13 days ago

Greece Payments Mcp

@junter1989k-ai

13 days ago

Switzerland Payments Mcp

@junter1989k-ai

13 days ago

Ivory Coast Payments Mcp

@junter1989k-ai

13 days ago

Aiimagemultistyle

A Model Context Protocol (MCP) server for image generation and manipulation using fal.ai's Stable Diffusion model.

a year ago