mcp

What is this MCP

This is a Model Context Protocol (MCP) server that integrates Semgrep, a static analysis tool, to scan code for security vulnerabilities within IDEs and LLM workflows.

How to use this MCP

Install via Python package (semgrep-mcp) or Docker container, then configure in supported IDEs like VS Code or Cursor by adding the server details to mcp.json configuration files.

What this MCP can be used for

Enabling real-time code security scanning during development, writing custom Semgrep rules, and integrating security analysis into AI-assisted coding workflows.