Semgrep▌
by semgrep
Semgrep is a leading code analysis tool that scans code for vulnerabilities, helping developers fix issues swiftly withi
Integrates with Semgrep's static analysis engine to scan code for security vulnerabilities and coding issues, enabling developers to identify and fix potential problems directly within their coding workflow.
github stars
★ 638
best for
- / Developers reviewing code for security issues
- / Security teams auditing codebases
- / CI/CD pipeline integration for automated scanning
- / Code quality analysis during development
capabilities
- / Scan code for security vulnerabilities
- / Run custom rule analysis on code
- / Fetch findings from Semgrep AppSec Platform
- / Generate Abstract Syntax Trees for code files
- / Get rule schemas for writing custom rules
- / Check supported programming languages
what it does
Runs Semgrep static analysis scans to find security vulnerabilities and code quality issues in your code. Can scan with built-in rules or custom rules you create.
about
Semgrep is an official MCP server published by semgrep that provides AI assistants with tools and capabilities via the Model Context Protocol. Semgrep is a leading code analysis tool that scans code for vulnerabilities, helping developers fix issues swiftly withi It is categorized under auth security, developer tools. This server exposes 8 tools that AI clients can invoke during conversations and coding sessions.
how to install
You can install Semgrep in your AI client of choice. Use the install panel on this page to get one-click setup for Cursor, Claude Desktop, VS Code, and other MCP-compatible clients. This server supports remote connections over HTTP, so no local installation is required.
license
MIT
Semgrep is released under the MIT license. This is a permissive open-source license, meaning you can freely use, modify, and distribute the software.
readme
Semgrep is a leading code analysis tool that scans code for vulnerabilities, helping developers fix issues swiftly withi
TL;DR: Runs Semgrep static analysis scans to find security vulnerabilities and code quality issues in your code. Can scan with built-in rules or custom rules you create.
What it does
- Scan code for security vulnerabilities
- Run custom rule analysis on code
- Fetch findings from Semgrep AppSec Platform
- Generate Abstract Syntax Trees for code files
- Get rule schemas for writing custom rules
- Check supported programming languages
Best for
- Developers reviewing code for security issues
- Security teams auditing codebases
- CI/CD pipeline integration for automated scanning
- Code quality analysis during development
Highlights
- Both local and platform scanning options
- Custom rule creation support
- Multiple programming languages supported