MCP Server for Semgrep Integration - static code analysis with AI
MCP Server for Semgrep Integration - static code analysis with AI
MCP Server Semgrep is a Model Context Protocol compliant server that integrates the powerful Semgrep static analysis tool with AI assistants like Anthropic Claude. It enables advanced code analysis, security vulnerability detection, and code quality improvements directly through a conversational interface.
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| scan_directory | Scanning source code for potential issues |
| list_rules | Displaying available rules and languages supported by Semgrep |
| analyze_results | Detailed analysis of scan results |
| create_rule | Creating custom Semgrep rules |
| filter_results | Filtering results by various criteria |
| export_results | Exporting results in various formats |
| compare_results | Comparing two sets of results (e.g., before and after changes) |
{
"mcpServers": {
"semgrep-1": {
"command": "npx",
"args": ["-y", "mcp-server-semgrep"],
"env": {
"SEMGREP_APP_TOKEN": "your-value",
"MCP_SERVER_SEMGREP_ALLOWED_ROOTS": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| SEMGREP_APP_TOKEN | Credential the server authenticates with. | Yes |
| MCP_SERVER_SEMGREP_ALLOWED_ROOTS | Configuration value read at startup. | Optional |
Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.
A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management