semgrep_scan

MCP tool from MCP by semgrep

Scan code files for security vulnerabilities with a given config string

How to use it

semgrep_scan is exposed by the MCP MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the semgrep_scan tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install MCP

$uvx semgrep-mcp # see --help for more options

FULL MCP LISTING

Other tools in MCP (6)

get_abstract_syntax_tree

Output the Abstract Syntax Tree (AST) of code

security_check

Scan code for security vulnerabilities

semgrep_findings

Fetch Semgrep findings from the Semgrep AppSec Platform API

semgrep_rule_schema

Fetches the latest semgrep rule JSON Schema