- Conduid
- Marketplace
- #semgrep
MCP servers tagged semgrep
26 live MCP servers tagged "semgrep", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with semgrep.
Semgrep
A MCP server for using [Semgrep](https://github.com/semgrep/semgrep) to scan code for security vulnerabilities.
Semgrep
MCP Server Semgrep is a [Model Context Protocol](https://modelcontextprotocol.io) compliant server that integrates the powerful Semgrep static analysis tool with AI assistants lik…
Aegis MCP
🛡️ Open-source MCP server for AI-powered DevSecOps — cloud audits, CVE scanning, secrets detection, K8s security & more.
Server Semgrep
MCP Server for Semgrep Integration - static code analysis with AI
Oauthlint
Catch the OAuth, OIDC, JWT & MCP security bugs AI coding assistants ship on repeat, across ten languages (JavaScript, Python, Go, C#, and more). A free, low-false-positive linter…
Vetcoders MCP Server Semgrep
MCP Server for Semgrep Integration - static code analysis with AI
Scankii
A local-first SAST & Runtime Security scanner built exclusively for LLM Agents. Detects cross-modal data leaks, prompt injections, and intercepts credentials before execution.
Security Gate Cursor
Three-layer security for Cursor: rules, evidence-grounded planning, MCP handbrake, KEV/OSV intel, Docker scanner lab
CodeReview.MCP
An AI-powered multi-agent MCP server that auto-reviews GitHub repos. It analyzes commits, detects vulnerabilities, suggests fixes, generates documentation, and creates PRs with hu…
Cerberus
Autonomous multi-agent security auditing platform with runtime exploit verification.
AI Cybersecurity Analyzer
AI-powered Python security analyzer combining Semgrep + MCP for contextual, prioritized vulnerability reports, with a Next.js/FastAPI UI and Terraform deploys to Azure Container A…
Mimir Scan
An MCP security scanner that integrates with AI coding agents like Claude Code, GitHub Copilot, Cursor, and others.
Mcpwatchman
Independent security and quality audit for Model Context Protocol servers — static analysis, dependency CVE scanning, and evidence-linked scores for every server in the official M…
Immune
Immune — the agent security loop that turns every attack into an antibody. MCP firewall → replayable breach trace in ClickHouse → synthesized countermeasure → replay-proven → Semg…
Quality Guardian MCP
MCP server aggregating Semgrep, PHPStan, Knip, PHPMetrics and Deptrac into a unified code-quality gate for AI agents (Claude Code, Cursor, Windsurf). Baseline-aware, session-level…
Bug Buster AI
A Cyber-Security Agent
Tlad Semgrep
Semgrep rules to detect Transport-Layer Auth Divergence (TLAD) in MCP servers — auth applied to some transports but not others.
Cursor Rules Generator
Create optimized configuration files for Cursor AI to improve coding accuracy across your development projects.
Praetor Security
Multi-engine static security analysis for code, repos, and AI agents: SAST, secrets, SCA, AI-security, and serialized-model/pickle scanning. Reports attack CHAINS and an agent cap…
Semgrep Scanner
Run Semgrep static analysis from an AI agent. OWASP top 10, secrets detection, custom rule packs. Baseline scanning to focus only on newly-introduced findings. Built for productio…
MAS GithubAnalyzer
Analyseur de dépôts GitHub avec protocole MCP, analyse AST, scan de vulnérabilités Semgrep et observabilité OpenTelemetry.
Objauthz Lab
Vulnerable-by-design MCP server for learning object-level / cross-tenant authorization (BOLA/IDOR) bugs, plus Semgrep rules that find the same shapes in JavaScript/TypeScript, Pyt…
Vulnbench
Benchmark of static analyzers on real, publicly disclosed vulnerabilities in open-source MCP servers: vulnerable/fixed commit pairs, Docker harness, SARIF scoring
Vulngate
Agent-neutral security checks before you ship — SAST, secrets, and dependency audit as a merge gate. Find, understand, and fix vulnerabilities in AI- or human-written code. BYO-in…
Agentic Semgrep Rules
Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, us…
FortressCI
No description published.