Semgrep MCP Server

About Semgrep

The Semgrep MCP server enables integration of Semgrep's static analysis capabilities within LLMs and AI agents. Allows scanning code for vulnerabilities, creating custom Semgrep rules, filtering results by severity/rule ID/file path, and exporting in JSON, SARIF, and text formats.

Tags

How to install Semgrep

Package

semgrep-mcp (pypi)

Transport

Local (stdio), Remote (Streamable HTTP), Remote (SSE)

Hosted endpoint

https://mcp.semgrep.ai/mcp

Install or run

uvx semgrep-mcp

Client configuration

{
  "mcpServers": {
    "semgrep": {
      "command": "uvx",
      "args": [
        "semgrep-mcp"
      ]
    }
  }
}

Copied from the official README — verified October 4, 2026. Replace placeholder keys with your own credentials.

Client setup documented by the maintainer

“Not documented” means the README has no client-specific steps — most MCP clients can still run a local stdio server from the configuration above.

Related MCP servers in Developer Tools