AcademyMCP serversDevelopment

Semgrep MCP Server

Development and security teams that want their AI agent to check code for vulnerabilities as it works.

  • Recommendedour rating
  • 16,954gitHub stars
  • LGPL-2.1licence
  • todaylast update
git clone https://github.com/semgrep/semgrep.git

What it does

An MCP server that scans code for security vulnerabilities using Semgrep. Once connected, your AI agent can ask for a scan of a codebase and work with the findings inside the conversation.

Use cases

  1. 01Scan a repository for security issues
  2. 02Check new code before opening a pull request
  3. 03Ask the agent to explain and fix a finding

Questions about
Semgrep MCP Server.

What is Semgrep MCP Server used for?

Development and security teams that want their AI agent to check code for vulnerabilities as it works. An MCP server that scans code for security vulnerabilities using Semgrep. Once connected, your AI agent can ask for a scan of a codebase and work with the findings inside the conversation.

How do I install Semgrep MCP Server?

Run this in your terminal: git clone https://github.com/semgrep/semgrep.git

Is Semgrep MCP Server open source?

Yes. The code is on GitHub (semgrep/semgrep) under the LGPL-2.1 licence.

Is Semgrep MCP Server safe to use?

It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.