Semgrep 服务器
用于将 Semgrep 集成到开发环境中的模型上下文协议 (MCP) 服务器。该服务器允许直接通过 MCP 协议执行静态代码分析和管理 Semgrep 规则。
安装
使用
可以通过以下方式启动服务器:
可用工具
该服务器提供以下 MCP 工具:
scan_directory
:在目录中运行 Semgrep 扫描list_rules
:列出可用的 Semgrep 规则analyze_results
:分析扫描结果create_rule
:创建一个新的 Semgrep 规则filter_results
:根据各种标准过滤扫描结果export_results
:以各种格式导出扫描结果compare_results
:比较两个扫描结果
发展
该项目使用 TypeScript 编写,并使用 MCP SDK 进行服务器实现。
项目结构
依赖项
Node.js 和 npm
TypeScript
MCP SDK
用于 HTTP 请求的 Axios
执照
该项目已获得 ISC 许可。更多详细信息请参阅LICENSE文件。
This server cannot be installed
remote-capable server
The server can be hosted and run remotely because it primarily relies on remote services or has no dependency on the local environment.
通过 MCP 协议实现 Semgrep 在开发环境中的集成,支持静态代码分析、规则管理和扫描结果操作。
Related Resources
Related MCP Servers
- AsecurityAlicenseAqualityEnables integration of DeepSeek's language models with MCP-compatible applications, offering features like chat completion, custom model selection, and parameter control for enhancing language-based interactions.Last updated -43271MIT License
- -securityAlicense-qualityA Model Context Protocol compliant server that integrates Semgrep static analysis tool with AI assistants like Anthropic Claude, enabling advanced code analysis, security vulnerability detection, and code quality improvements through a conversational interface.Last updated -3718MIT License
Semgrep MCP Serverofficial
AsecurityAlicenseAqualityAn MCP server that provides a comprehensive interface to Semgrep, enabling users to scan code for security vulnerabilities, create custom rules, and analyze scan results through the Model Context Protocol.Last updated -6561MIT License- -securityAlicense-qualityA server implementation that exposes grep functionality through the Model Context Protocol, allowing MCP-compatible clients to search for patterns in files using regular expressions.Last updated -15GPL 3.0