Semgrep SAST MCP Plugin

Model Context Protocol (MCP)Freemium

The Semgrep SAST MCP Plugin empowers AI development agents to run semantic AST rules over local repositories. It automatically catches injection flaws, hardcoded credentials, and flawed cryptographic algorithms before code is committed.

MCP Architecture & Specifications

Protocol Specification	Model Context Protocol (MCP v1.0)
Transport Architecture	stdio (Standard Input/Output) / SSE
Supported AI Clients	Claude DesktopCursorAntigravity
Execution Sandbox	Isolated local subprocess with explicit tool call permission gating
Security Verification	MCP Schema & Protocol Audited

Claude Desktop & Cursor Configuration

claude_desktop_config.json

{
  "mcpServers": {
    "semgrep": {
      "command": "semgrep",
      "args": [
        "mcp",
        "--config",
        "auto"
      ]
    }
  }
}

Exposed Tools & Capabilities

4 Verified Capabilities

Semantic static analysis for 30+ programming languages

Custom YAML security rule authoring with interactive AI validation

Automated pull request review and security policy enforcement

MCP tool hooks for automatic linting during AI coding generation

Verified User Reviews & Ratings

Authentic community ratings calculated dynamically across security, workflow, and pricing.

4.9/ 5.0

Based on 0 verified reviews & research benchmarks

100%

Similar MCP Servers & AI Plugins

Extend agent capabilities with verified Model Context Protocol tools

View All

PostgreSQL MCP Server

MIT

Allows AI agents to safely read table schemas, inspect column constraints, and execute parameterized SQL queries.

View MCP specs

SecurityHeaders MCP Server

MCP Protocol

MCP server connecting Claude and ChatGPT to analyze CSP headers, HSTS enforcement, and TLS configuration audits in real time.

View MCP specs

Filesystem MCP Server

MIT

Provides AI agents with scoped file read, write, directory search, and tree traversal within designated folders.

View MCP specs

Semgrep SAST MCP Plugin

Model Context Protocol (MCP)Freemium

Docs

MCP Architecture & Specifications

Protocol Specification	Model Context Protocol (MCP v1.0)
Transport Architecture	stdio (Standard Input/Output) / SSE
Supported AI Clients	Claude DesktopCursorAntigravity
Execution Sandbox	Isolated local subprocess with explicit tool call permission gating
Security Verification	MCP Schema & Protocol Audited

Claude Desktop & Cursor Configuration

claude_desktop_config.json

{
  "mcpServers": {
    "semgrep": {
      "command": "semgrep",
      "args": [
        "mcp",
        "--config",
        "auto"
      ]
    }
  }
}