From flowspec
Runs Semgrep locally for SAST code scanning to detect security vulnerabilities in source code.
npx claudepluginhub jpoley/flowspec --plugin flowspecAdd to your .mcp.json:
{
"mcpServers": {
"semgrep": {
"command": "npx",
"args": [
"-y",
"@returntocorp/semgrep-mcp"
]
}
}
}This server connects to external services. Review the URLs it accesses before enabling.
npxShare bugs, ideas, or general feedback.