MCP Servers
semgrep/mcp
A MCP server for using Semgrep to scan code for security vulnerabilities.
Our verdict
We have not reviewed semgrep/mcp yet
No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.
From the listing
About semgrep/mcp
A Model Context Protocol server that enables AI agents to run Semgrep scans on codebases for security vulnerabilities. It exposes Semgrep's static analysis capabilities through the MCP interface, allowing tools like Claude to request scans and receive results.
Best for
Developers who want to add automated security scanning to their AI-assisted coding workflows
Use cases
- Automate security scanning of pull requests via AI coding assistants
- Integrate vulnerability detection into agentic code review workflows
- Run targeted Semgrep rules on code snippets during development
Notes
668 stars on GitHub. Last updated 2025-10-28. Licensed MIT.
Pros
- Leverages Semgrep's powerful pattern-based static analysis engine
- Simple MCP interface makes it easy to plug into existing AI toolchains
- Open source with active community (668 stars)
Cons
- Requires Semgrep to be installed and configured separately
- Limited to the capabilities and rules available in the local Semgrep setup
- MCP protocol is still evolving, may have compatibility issues with some clients
Key facts
What we have checked
- Days since the last commit
- 373
- GitHub forks
- 57
- GitHub stars
- 687
- Days to a first reply on issues
- 456.4
- Open issues
- 12
- Releases in the last 90 days
- 0
Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.
How to use
How to set it up
As the listing publishes it. We have not run this install.
Install
uvx semgrep-mcp # see --help for more optionsTools exposed
semgrep_scan
Clients the listing names (not checked here)
Claude Desktop, Claude Code, Cursor, Windsurf, VS Code, ChatGPT
Install
Add semgrep/mcp to your client
No install recipe yet. We write one for Claude Code, Claude Desktop, Cursor, VS Code, Codex and ChatGPT when the server is in the official MCP registry with a package or remote address we can use.
Until then, follow the project's own README, or the setup the listing publishes under How to set it up.
Works with
What semgrep/mcp connects to
No confirmed connections yet. A product appears here when the server's registry name, repo, homepage or name ties it to that product, and a client appears when we have an install recipe for it.
Stars and usage
How semgrep/mcp is growing
686 to 687
Health and security
Is semgrep/mcp looked after, and what do its setup files show
Health score
0 out of 100
| Part | Points | What we saw |
|---|---|---|
| Archived | 0 | Repository is archived |
Alternatives
Alternatives to semgrep/mcp
| Record | Type | How we know | Checked |
|---|---|---|---|
| AegisGate MCPAlternative to this | MCP server | Matched from the listing text | |
| Agent Permissions IndexAlternative to this | MCP server | Matched from the listing text | |
| sourceryAlternative to this | MCP server | Matched from the listing text |
Compare
Compare semgrep/mcp side by side
Sources
Where this comes from
- GitHubRegistry
A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.
Changelog
What changed
No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.
Open-source & AI alternatives
Swap-in tools that solve the same job. Weigh the trade-offs before you commit.
sourcery
abyssbugg
Sourcery security findings for AI coding agents: MCP server (12 tools), skills, CLI, and adapters for Claude Code, Cursor, Codex/ChatGPT, VS Code, Devin, Grok, Amp, Hermes, OpenCla
AegisGate MCP
aegisgatesecurity
AegisGate MCP — Standalone Model Context Protocol security server with 23 security layers, vendored ONNX runtime, neural threat detection (L3). SSE streaming. Session management. Z
Agent Permissions Index
agent-permissions-index
Free public remote MCP server: grade your agent config, get index stats and the agent safety leaderboard from Claude Code, Cursor or Codex.
Pairs with
Other entries in the index that connect to this one. Click through to see the chain.
3ilm-mcp
holistis
MCP server: 1,032 verified smart contract vulnerability findings from 10 Sherlock audit contests
AcidPeak
acidpeak
Connect an AI assistant to AcidPeak with the Model Context Protocol: read-only tools for CVE lookup, recent threats, product matching, US breach notices,…
agent-guard
ipezygj
Safety checks an agent runs before it acts: package malware, destructive command, secret leak.
agent-sec
kernora-ai
Kernora Agent Security — a zero-install security baseline for AI coding agents (MCP). Free & open.
Get the free Developer’s Field Guide
A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.
Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.