TL;DR
Semgrep is a Security MCP server that lets Claude Code, Cursor, Windsurf and any MCP-compatible AI agent enable AI agents to secure code with Semgrep. Install in 1 minute with mcpizy install semgrep.
Semgrep
Install verifiedSecurity
Enable AI agents to secure code with Semgrep. Static analysis for finding bugs and security issues.
Repo audit: 54/100 — little recent maintenance, or missing licence and docs
Scored on licence, adoption, maintenance and documentation of semgrep/mcp. We show the grade whether it flatters the server or not.
repository archived · no commit for 10 months · 684 stars · MIT licence · 28 open issues
Read the full audit on CheckMCPInstall Semgrep
mcpizy install semgrepuvx semgrep-mcpWorks with
More Security MCPs
RAD Security
AI-powered security insights for Kubernetes and cloud workloads. Threat detection.
1Password
Manage 1Password vaults, items, and secrets from AI agents via the Model Context Protocol.
Auth0
Manage Auth0 tenants, users, roles, and applications from AI agents via MCP.
Okta
Manage Okta users, groups, and application assignments for identity from AI agents.
Alternatives to Semgrep
If Semgrep doesn't fit your stack, these Security MCP servers solve similar problems.
Frequently asked questions
What is the Semgrep MCP server?
Semgrep is listed as an Security Model Context Protocol server whose documented purpose is to let an MCP-compatible agent enable AI agents to secure code with Semgrep. Client support, permissions and authentication remain specific to the upstream project.
How do I install Semgrep MCP with Claude Code?
The fastest way is the MCPizy CLI: run `mcpizy install semgrep` and MCPizy will add the server to your `.claude.json` automatically. You can also install it manually by adding an entry under `mcpServers` in `.claude.json` with the command `uvx semgrep-mcp` and restarting Claude Code.
Does MCPizy charge to view or install Semgrep MCP?
No. Reading this profile and copying its install guidance is free. Upstream software, API, account or usage costs are separate, and licence coverage should be checked from the linked source when available.
Does Semgrep MCP work with Cursor and Windsurf?
The MCP standard is supported by those clients, but a specific server can still have client-specific setup or transport limits. Use the configuration shown on this page when present and verify the upstream instructions before installation.
What can I do with Semgrep MCP?
Its documented purpose is to let an MCP-compatible agent enable AI agents to secure code with Semgrep. The exact tools, permissions and write capabilities depend on the server version and configuration shown by the upstream project.
Compare before you commit
Put this server beside an alternative, or return to the full evidence directory.
Compare MCP serversBack to directory