Semgrep MCP Server

🚀 Semgrep Server

A Model Context Protocol (MCP) server for integrating Semgrep into the development environment. This server supports performing static code analysis and managing Semgrep rules, which can be directly implemented through the MCP protocol.

🚀 Quick Start

📦 Installation

# Clone the repository
git clone [repository URL]
cd semgrep-server

# Install dependencies
npm install

# Build the server
npm run build

💻 Usage Examples

The server can be started in the following ways:

# Production mode
npm start

# Development mode
npm run dev

✨ Features

The server provides the following MCP tools:

• scan_directory: Perform a Semgrep scan in the specified directory.
• list_rules: List available Semgrep rules.
• analyze_results: Analyze scan results.
• create_rule: Create a new Semgrep rule.
• filter_results: Filter scan results based on different conditions.
• export_results: Export scan results in multiple formats.
• compare_results: Compare two scan results.

📚 Documentation

Development

This project is written in TypeScript and implements the server based on the MCP SDK.

Project Structure

semgrep-server/
├── src/           # Source code
├── build/         # Compiled JavaScript files
├── test.js        # Test file
└── test-rule.yaml # Example Semgrep rule

Dependencies

• Node.js & npm
• TypeScript
• MCP SDK
• Axios for HTTP requests

📄 License

This project is licensed under the ISC license. For more details, please refer to the LICENSE file.