Semgrep MCP Server
by Semgrep
Scan code for security vulnerabilities with static analysis.
About Semgrep
The Semgrep MCP server enables integration of Semgrep's static analysis capabilities within LLMs and AI agents. Allows scanning code for vulnerabilities, creating custom Semgrep rules, filtering results by severity/rule ID/file path, and exporting in JSON, SARIF, and text formats.
Tags
How to install Semgrep
Add the following entry to your MCP client config (e.g. claude_desktop_config.json or .mcp.json). Refer to the official repository for the exact command, package name, and required environment variables.
{
"mcpServers": {
"semgrep": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-semgrep"]
}
}
}Example shape only — see the repository for the canonical install command.
Related MCP servers in Developer Tools
Read and write GitHub repos, issues, PRs, and workflows.
Read and write local files inside an allowed directory.
Build, validate, and run n8n workflows programmatically.
Cloud browser automation for LLMs via Browserbase and Stagehand.