mcp-servers/servers/dev.semgrep-mcp-uvx.json at e9213bca3a2c883d44da6448ea11f60ca412e3c4 · mcpmux/mcp-servers · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
{
  "$schema": "../schemas/server-definition.schema.json",
  "id": "dev.semgrep-mcp-uvx",
  "name": "Semgrep (uvx)",
  "alias": "semgrep",
  "description": "Run Semgrep static analysis through MCP. Scan code for security vulnerabilities with 5,000+ built-in rules, write and run custom rules, inspect ASTs, and fetch findings from the Semgrep AppSec Platform.",
  "logo": "https://avatars.githubusercontent.com/u/29760937?v=4",
  "schema_version": "2.1",
  "categories": [
    "security",
    "developer-tools"
  ],
  "tags": [
    "semgrep",
    "security",
    "static-analysis",
    "sast",
    "code-scanning",
    "vulnerabilities",
    "appsec"
  ],
  "transport": {
    "type": "stdio",
    "command": "uvx",
    "args": [
      "semgrep-mcp"
    ],
    "env": {
      "SEMGREP_APP_TOKEN": "${input:SEMGREP_APP_TOKEN}"
    },
    "metadata": {
      "inputs": [
        {
          "id": "SEMGREP_APP_TOKEN",
          "label": "Semgrep App Token",
          "description": "Optional. Connects the server to the Semgrep AppSec Platform to enable cloud features such as fetching findings (semgrep_findings). Leave empty to run local scans only.",
          "type": "text",
          "required": false,
          "secret": true,
          "placeholder": "********************************",
          "obtain": {
            "url": "https://semgrep.dev/orgs/-/settings/tokens",
            "instructions": "1. Sign in at https://semgrep.dev\n2. Go to Settings > Tokens\n3. Create a new token (API scope)\n4. Copy it and paste here",
            "button_label": "Create Token"
          }
        }
      ]
    }
  },
  "auth": {
    "type": "optional_api_key",
    "instructions": "No token is required for local scanning. Provide an optional SEMGREP_APP_TOKEN to enable Semgrep AppSec Platform features. Create one at https://semgrep.dev/orgs/-/settings/tokens"
  },
  "contributor": {
    "name": "Semgrep",
    "github": "semgrep",
    "url": "https://semgrep.dev"
  },
  "links": {
    "repository": "https://github.com/semgrep/mcp",
    "homepage": "https://semgrep.dev",
    "documentation": "https://github.com/semgrep/mcp#readme"
  },
  "platforms": [
    "all"
  ],
  "capabilities": {
    "tools": true,
    "resources": true,
    "prompts": true,
    "read_only_mode": false
  },
  "changelog_url": "https://github.com/semgrep/mcp/blob/main/CHANGELOG.md"
}