Browse
→ Code & Dev
→ Semgrep MCP
Semgrep MCP
Run Semgrep static analysis scans from MCP clients. Detect security vulnerabilities, code quality issues, and policy violations across any codebase.
MCP verified
Integration
| Transport | stdio |
| Auth | api-key |
| Endpoint | npx mcp-server-semgrep |
| Install | npx mcp-server-semgrep |
Use Cases
| 01 | Scan code for security vulnerabilities during AI-assisted development |
| 02 | Enforce coding policies and detect anti-patterns automatically |
| 03 | Run SAST scans as part of automated code review pipelines |
Tags
security sast static-analysis vulnerabilities code-quality
Machine-readable: /api/servers.json
· JSON-LD schema embedded in <head>