Semgrep vs WalletTriage

A side-by-side look at the Semgrep and WalletTriage MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.

Semgrep logoSemgrepSecurity · Local subprocess (stdio)Scan code for security vulnerabilities using Semgrep.48FairAuth: no auth requiredWalletTriage logoWalletTriageSecurity · Local subprocess (stdio)Real-time exploit-exposure risk check for EVM wallets, paid per query via x402 (USDC on Base).49FairAuth: not declared

Verdict: choose Semgrep for security work as a local process; choose WalletTriage for security as a local process. You can also run both side by side in one mcpServers block.

Which MCP server should you choose?

Semgrep logoChoose Semgrep when

  • You need dedicated capabilities in the Security domain.
  • You prefer a local stdio subprocess transport.
  • Its auth model fits you: No auth required.
Explore Semgrep

WalletTriage logoChoose WalletTriage when

  • You need dedicated capabilities in the Security domain.
  • You prefer a local stdio subprocess transport.
  • You have the keys it needs: EVM_PRIVATE_KEY, GATEWAY_URL, MAX_PAYMENT_ATOMIC, DEFAULT_SCAN_CHAIN.
  • You want tools like check_address_risk, get_pricing.
Explore WalletTriage

Feature & specification comparison

Rows where the two servers differ are marked.

SpecSemgrep logoSemgrepWalletTriage logoWalletTriage
CategorySecuritySecurity
Quality signal48/100 · Fair49/100 · Fair
Install commandConfirmedConfirmed
TransportLocal subprocess (stdio)Local subprocess (stdio)
AuthNo auth requiredNot declared
PricingFreeNot declared
Required env varsNone listedEVM_PRIVATE_KEYGATEWAY_URLMAX_PAYMENT_ATOMICDEFAULT_SCAN_CHAIN
Verified ownerCommunity listingCommunity listing
GitHub stars17,1990
Directory activity 1 views 0 installs 0 upvotes 2 views 0 installs 0 upvotes
ToolsNot listed2

Tools & capabilities

Semgrep tools

No tool names declared yet. Check the project README from the listing page.

WalletTriage tools 2

  • check_address_risk
  • get_pricing

Ready-to-paste client configs

Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.

Semgrep

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "semgrep-semgrep": {
      "command": "uvx",
      "args": [
        "semgrep"
      ]
    }
  }
}

WalletTriage

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "wallettriage": {
      "command": "npx",
      "args": [
        "-y",
        "wallettriage-mcp"
      ],
      "env": {
        "EVM_PRIVATE_KEY": "YOUR_EVM_PRIVATE_KEY_HERE",
        "GATEWAY_URL": "YOUR_GATEWAY_URL_HERE",
        "MAX_PAYMENT_ATOMIC": "YOUR_MAX_PAYMENT_ATOMIC_HERE",
        "DEFAULT_SCAN_CHAIN": "YOUR_DEFAULT_SCAN_CHAIN_HERE"
      }
    }
  }
}

Frequently asked questions

Semgrep is categorized under Security and uses a local stdio subprocess. WalletTriage belongs to Security and uses a local stdio subprocess. Pick Semgrep for security work and WalletTriage for security.

Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client.

Semgrep is listed as free. Auth: no auth required. WalletTriage has no declared pricing — check the project's own site. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.

Yes. MCP clients support multiple servers: add semgrep-semgrep and wallettriage as separate keys in the same mcpServers object, and your assistant will call tools from either one.

On AllMCPs, Semgrep has a quality signal of 48/100 (Fair) with 1 views, 0 installs and 17,199 GitHub stars. WalletTriage has 49/100 (Fair) with 2 views, 0 installs and 0 GitHub stars.