Semgrep Server MCP Server

What is Semgrep Server?

Semgrep Server is an MCP (Model Context Protocol) server that integrates Semgrep static code analysis into a development environment. It allows users to run scans, manage rules, and analyze results directly through the MCP protocol. It is built for developers who need to incorporate code-quality checks into their toolchain.

How to use Semgrep Server?

Clone the repository, run npm install to install dependencies, then npm build to compile the TypeScript source. Start the server in production mode with npm start or in development mode with npm run dev. No configuration keys are mentioned.

Key features of Semgrep Server

• Scan a directory with scan_directory.
• List available Semgrep rules with list_rules.
• Analyze scan results with analyze_results.
• Create new Semgrep rules with create_rule.
• Filter and export results with filter_results and export_results.
• Compare two sets of scan results with compare_results.

Use cases of Semgrep Server

• Automatically scan a project folder for security vulnerabilities or coding patterns.
• Manage and extend a set of static analysis rules without leaving the development environment.
• Compare scan outputs from different code versions to catch regressions.
• Export filtered results to share with team members or integrate into CI pipelines.