S

Semgrep

Run Semgrep code scans and inspect findings.

·No reviews yet
Repo
Share:

About

Auto-generated

Semgrep is a Model Context Protocol server in the Developer Tools category. It lets AI assistants that speak MCP call its tools and read its resources over STDIO.

Example tools

Illustrative tool names — the actual tool set is defined by the server at runtime.

list_resources
Enumerate resources exposed by this MCP
get_resource
Fetch a resource by ID
invoke
Invoke the primary action of this MCP

Screenshots

No screenshots yet.

Frequently Asked Questions

Common questions about Semgrep.

What is the Semgrep MCP, and what are its primary functions?
The Semgrep MCP allows users to run Semgrep code scans directly through their MCP client. It provides a means to inspect security findings and static analysis results from code. This facilitates code quality and security checks within development workflows.
How do I install and configure the Semgrep MCP in a client like Cursor?
Installation details depend on the specific MCP client used. Generally, you would add the Semgrep MCP by its slug, semgrep, within your client's MCP configuration settings. Refer to your MCP client's documentation for precise installation and usage instructions.
Does the Semgrep MCP require an API key or other credentials for authentication?
No, the Semgrep MCP as described does not require an API key, OAuth, or any other credentials for authentication. It uses the stdio transport, indicating local execution without external service authentication.
What key capabilities and tools does the Semgrep MCP expose?
The Semgrep MCP exposes capabilities for security scanning and static analysis of code. While specific tools are not listed, it enables running Semgrep to identify security vulnerabilities and code quality issues directly within your environment.
Are there any known limitations or prerequisites for using the Semgrep MCP?
A key prerequisite for the Semgrep MCP is the local availability of the Semgrep binary, as it leverages a stdio transport. Performance and available features may depend on your local Semgrep installation and configuration. It operates locally and doesn't offer cloud-based features.

Install Semgrep

Claude Desktop

Add this to claude_desktop_config.json.

{
  "mcpServers": {
    "semgrep": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-semgrep"
      ]
    }
  }
}

Cursor

Add this to ~/.cursor/mcp.json.

{
  "mcpServers": {
    "semgrep": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-semgrep"
      ]
    }
  }
}

VS Code

Add this to your workspace settings.json.

{
  "mcp.servers": {
    "semgrep": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-semgrep"
      ]
    }
  }
}

Reviews

Sign in to leave a review.

No reviews yet. Be the first!

Discussion(0)

Sign in to join the discussion.

No comments yet.