Wrapper for semgrep/mcp - Static code analysis for security vulnerabilities.
- 5000+ security rules out of the box
- Supports 30+ programming languages
- Fast, deterministic static analysis
- Custom rule support
| Tool | Description |
|---|---|
| security_check | Quick security scan of code |
| semgrep_scan | Full Semgrep scan with configurable rules |
| semgrep_scan_with_custom_rule | Scan with custom YAML rules |
| get_abstract_syntax_tree | Get AST for code analysis |
| semgrep_findings | Get findings from previous scans |
| supported_languages | List supported languages |
docker build -t semgrep-mcp .
docker run -i --rm -v /path/to/code:/code semgrep-mcp{
"mcpServers": {
"semgrep": {
"command": "docker",
"args": [
"run", "-i", "--rm",
"-v", "/path/to/code:/code",
"semgrep-mcp:latest"
]
}
}
}| Variable | Default | Description |
|---|---|---|
SEMGREP_APP_TOKEN |
(optional) | Semgrep Cloud token for additional rules |
MIT