Stats
Actions
Tags
From flowspec
Runs Semgrep SAST (Static Application Security Testing) locally to scan source code for security vulnerabilities and enforce coding standards. No API key required.
Copy this JSON into your .mcp.json to enable this server
Add to your .mcp.json:
{
"mcpServers": {
"semgrep": {
"command": "npx",
"args": [
"-y",
"@returntocorp/semgrep-mcp"
]
}
}
}Review these signals before enabling this server
This server connects to external services. Review the URLs it accesses before enabling.
Server configuration and connection parameters
npxCommand-line arguments passed to the server process
npx claudepluginhub jpoley/flowspec --plugin flowspec