mcp-server-semgrep

Overview

MCP Server Semgrep is a Model Context Protocol compliant server that bridges the powerful Semgrep static analysis tool with AI assistants like Claude. It enables developers to perform advanced code analysis, detect security vulnerabilities, and improve code quality directly through conversational interfaces. The server offers comprehensive tools including directory scanning, rule listing, result analysis, and custom rule creation, making it an essential tool for development teams focused on security and code quality.

Try asking AI

After installing, here are 4 things you can ask your AI assistant:

• scan_directory

  Scanning source code for potential issues

  Try:Scan my source code in the /projects/my-application directory for potential security issuesTry:Check the entire project for code quality issues
• list_rules

  Displaying available rules and languages supported by Semgrep

  Try:Show me all available Semgrep rulesTry:List all supported languages for Semgrep analysis
• analyze_results

  Detailed analysis of scan results

  Try:Analyze the Semgrep scan results in detailTry:Explain the critical vulnerabilities found in the scan
• create_rule

  Creating custom Semgrep rules

  Try:Create a Semgrep rule that detects improper use of input sanitization functionsTry:Make a rule to detect deprecated imports in our codebase
• filter_results

  Filtering results by various criteria

  Try:Show me only scan results related to SQL injection vulnerabilitiesTry:Filter results to show only high severity issues
• export_results

  Exporting results in various formats

  Try:Export the scan results as a JSON fileTry:Generate an HTML report of the analysis findings
• compare_results

  Comparing two sets of scan results

  Try:Compare scan results before and after the code changesTry:Show me the differences between the current scan and the last one

Comparable tools

Installation

npm install -g mcp-server-semgrep

{
  "mcpServers": {
    "semgrep": {
      "command": "node",
      "args": [
        "/your_path/mcp-server-semgrep/build/index.js"
      ],
      "env": {
        "SEMGREP_APP_TOKEN": "your_semgrep_app_token",
        "MCP_SERVER_SEMGREP_ALLOWED_ROOTS": "/Users/you/projects"
      }
    }
  }
}

Compare mcp-server-semgrep with