mcp
コードセキュリティスキャン用のSemgrep MCPサーバー. mcp is a Model Context Protocol (MCP) server maintained by semgrep. It connects to MCP-compatible clients such as Claude Desktop, Cursor, Cline, and other agents that speak the protocol. It exposes 6 tools, including security_check, semgrep_scan, semgrep_scan_with_custom_rule, get_abstract_syntax_tree, supported_languages and semgrep_rule_schema, that an agent can call directly. It is categorized under Security/Vulnerability, Tool/Server and Development/IDE.
このMCPについて
これは静的解析ツールであるSemgrepを統合したModel Context Protocol(MCP)サーバーで、IDEやLLMワークフロー内でコードのセキュリティ脆弱性をスキャンします。
使用方法
Pythonパッケージ(semgrep-mcp)またはDockerコンテナでインストールし、VS CodeやCursorなどのサポート対象IDEでmcp.json設定ファイルにサーバー詳細を追加して設定します。
用途
開発中のリアルタイムコードセキュリティスキャンの有効化、カスタムSemgrepルールの作成、AI支援コーディングワークフローへのセキュリティ分析の統合が可能です。
AIMCP authority
DR and traffic signal for the AIMCP public domain.
Frequently asked questions
What is the mcp MCP server?
mcp is a Model Context Protocol server from semgrep. It lets MCP-compatible AI clients call its tools over a standard interface, so agents like Claude, Cursor, and Cline can use it without custom integration.
How do I connect mcp to my AI client?
Add mcp to your client's MCP configuration using the stdio or SSE connection shown in the usage examples on this page, then restart the client to load the server.
What tools does mcp provide?
mcp provides 6 tools: security_check, semgrep_scan, semgrep_scan_with_custom_rule, get_abstract_syntax_tree, supported_languages and semgrep_rule_schema.
Is mcp free to use?
mcp is listed on AIMCP for free. Any API keys or accounts required by the underlying service are set by its provider.
Vernclaw Plugins for OpenClaw
Ready-to-use connectors for SEO data, social reading & content generation. Pay-as-you-go credits with audit logs.
