Security

Semgrep MCP

semgrep/mcp (uvx semgrep-mcp) lets agents run Semgrep scans, review findings, and use Semgrep AppSec Platform features with an optional SEMGREP_APP_TOKEN.

Stars

681

Installs

65.0k

License

MIT

Kind

MCP

Trust evidence

Verified

Verified MCP — curated catalog entry with reviewed setup metadata.

  • Stars: 681 · catalog
  • Freshness: Updated 2026-06-01
  • Used in 1 known stack

Prerequisites

  • · Host app that loads MCP config (Cursor, Claude Desktop, etc.)
  • · Environment: SEMGREP_APP_TOKEN

Reference command

{
  "mcpServers": {
    "semgrep": {
      "command": "uvx",
      "args": ["semgrep-mcp"],
      "env": {
        "SEMGREP_APP_TOKEN": "<YOUR_SEMGREP_APP_TOKEN>"
      }
    }
  }
}

Often stacked with

Stacks that include this