mcp

mcp

160
security

Semgrep MCP Server is a tool that enables code scanning for security vulnerabilities using Semgrep within the Model Context Protocol framework. It integrates with popular development environments like VS Code and offers extensive language support with a wide range of rules for static code analysis.

Semgrep MCP Server

A Model Context Protocol (MCP) server for using Semgrep to scan code for security vulnerabilities. It provides deterministic static analysis and supports many programming languages with access to over 5,000 rules. Integrations are available for various IDEs like VS Code, Copilot, Windsurf, and more. The project encourages community involvement through feedback, bug reports, and feature requests.

Contents

  • Getting Started
  • Demo
  • API
  • Usage
  • Semgrep AppSec Platform
  • Integrations
  • Contributing, Community, and Running From Source