SemgrepBLOCK
MCP Server Semgrep is a [Model Context Protocol](https://modelcontextprotocol.io) compliant server that integrates the powerful Semgrep static analysis tool with AI assistants like Anthropic Claude. It enables advanced code analysis, security vulnerability detection, and code quality improvements di
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://smithery.ai/server/@vetcoders/mcp-server-semgrep) [](https://glama.ai/mcp/servers/vetcoders/mcp-server-semgrep)
POWERED BY:
[](https://semgrep.dev)
About the Project
[](https://github.com/vetcoders/mcp-server-semgrep) This project was initially inspired by robustness of Semgrep tool, The Replit Team and their Agent V2, as well as the implementation by stefanskiasan/semgrep-mcp-server, but has evolved with significant architectural changes for enhanced and easier installation and maintenance.
MCP Server Semgrep is a Model Context Protocol compliant server that integrates the powerful Semgrep static analysis tool with AI assistants like Anthropic Claude. It enables advanced code analysis, security vulnerability detection, and code quality improvements directly through a conversational interface.
Benefits of Integration
For Developers and Development Teams:
- Holistic Source Code Analysis - detecting issues throughout the entire project, not just in individual files
- Proactive Error Detection - identifying potential problems before they become critical bugs
- Continuous Code Quality Improvement - regular scanning and refactoring lead to gradual codebase improvements
- Stylistic Consistency - identification and fixing of inconsistencies in code, such as:
- Arbitrary z-index layers in CSS
- Inconsistent naming conventions
- Code duplication
- "Magic numbers" instead of named constants
For Security:
- **Automated Code Verification for Known
82d97bd78833OBSERVED · 2026-10-09Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp-server-semgrep --env SEMGREP_APP_TOKEN=${SEMGREP_APP_TOKEN} -- npx -y [email protected]{
"mcpServers": {
"mcp-server-semgrep": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"SEMGREP_APP_TOKEN": "${SEMGREP_APP_TOKEN}"
}
}
}
}Exposed tools (7)
6 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
analyze_results | read | Analyzes scan results |
compare_results | read | Compares two scan results |
create_rule | write | Creates a new Semgrep rule |
export_results | read | Exports scan results in various formats |
filter_results | read | Filters scan results by various criteria |
list_rules | read | Lists available Semgrep rules |
scan_directory | read | Performs a Semgrep scan on a directory |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (2 observation(s))
- Network
- declared (2 observation(s))
- Shell
- declared (3 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (4)
eval(userInput); // Dangerous eval
@modelcontextprotocol/sdk, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint, typescript, vitest, semgrep
curl -sSL https://install.semgrep.dev | sh
curl -sSL https://install.semgrep.dev | sh
Gates applied: no_behavioural_pass.
82d97bd78833full audit observations/trust-audit/mcp-server/szowesgad__semgrep-2.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | 82d97bd78833 | BLOCK | D | 69 | first audit |
Questions
What is the Semgrep MCP server?
MCP Server Semgrep is a [Model Context Protocol](https://modelcontextprotocol.io) compliant server that integrates the powerful Semgrep static analysis tool with AI assistants like Anthropic Claude. It enables advanced code analysis, security vulnerability detection, and code quality improvements di
What tools does Semgrep expose?
7 in total: 6 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Semgrep safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does Semgrep need?
It reads SEMGREP_APP_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Semgrep run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as mcp-server-semgrep at 1.0.1.
How current is this page?
The grade is for one exact copy of the source (82d97bd78833), read on 2026-10-09. The repository is watched and re-audited when it changes.