Semgrep MCP Server

1. security_check

Scan code for security vulnerabilities.

2. semgrep_scan

Scan code files for security vulnerabilities with a given config string.

3. semgrep_scan_with_custom_rule

Scan code files using a custom Semgrep rule.

4. get_abstract_syntax_tree

Output the Abstract Syntax Tree (AST) of code.

5. semgrep_findings

Fetch Semgrep findings from the Semgrep AppSec Platform API (login and Semgrep token required).

6. supported_languages

Return the list of languages Semgrep supports.

7. semgrep_rule_schema

Fetches the latest semgrep rule JSON Schema.

8. write_custom_semgrep_rule

Return a prompt to help write a Semgrep rule.

9. semgrep_rule_resource

Access Semgrep rule specification and full rules from the registry (via resources).

{
  "mcpServers": {
    "semgrep": {
      "command": "uvx",
      "args": ["semgrep-mcp"],
      "env": {
        "SEMGREP_APP_TOKEN": "<token>"
      }
    }
  }
}