Semgrep MCP Server
By thumbsupordown
Semgrep's MCP server exposes its static-analysis engine as callable tools, letting an agent scan the code it just wrote against Semgrep's rule library of over 5,000 rules. Semgrep is deterministic and semantically aware of many languages, which makes it a useful check on generated code precisely because it does not rely on a model's judgement. Important currency note: the standalone semgrep/mcp repository is now DEPRECATED, with further MCP support shipping through the official semgrep binary instead — most guides still point at the archived repo.