Semgrep

🚀 Semgrep MCP Server

Semgrep MCP Server provides a platform for running Semgrep scans, enabling efficient code analysis and security checks.

🚀 Quick Start

Run the Server

semgrep-mcp-serve

Example Python SSE Client

from mcp.client.session import ClientSession
from mcp.client.sse import sse_client


async def main():
    async with sse_client("http://localhost:8000/sse") as (read_stream, write_stream):
        async with ClientSession(read_stream, write_stream) as session:
            await session.initialize()
            results = await session.call_tool(
                "semgrep_scan",
                {
                    "code_files": [
                        {
                            "filename": "hello_world.py",
                            "content": "def hello(): print('Hello, World!')",
                        }
                    ]
                },
            )
            print(results)


if __name__ == "__main__":
    import asyncio
    asyncio.run(main())

📦 Installation

Install and Run with Docker

docker run -it --rm semgrep/mcp:latest

Manual Installation (Based on Python)

1. Install Python:
   • Windows:

     # Install Python 3.x
     choco install python3
     

   • macOS:

     # Install Python 3 using Homebrew
     brew install python
     

2. Install Semgrep and MCP Server:

   pip install semgrep mcp-server
   

📚 Documentation

Official Links

• Semgrep Official Website
• MCP Protocol Documentation
• Semgrep GitHub Repository

Community and Support

• Slack Channel: #mcp
• Discussions: Ask questions or share ideas in GitHub Discussions

🔧 Contribution and Development

Submit Code

1. Fork the repository and clone it locally:

   git clone https://github.com/semgrep/mcp-server.git
   cd mcp-server
   git checkout main
   

2. Create a feature branch and submit code:

   git checkout -b feature/your-feature-name
   # Make code changes
   git add .
   git commit -m "Add new feature"
   git push origin feature/your-feature-name
   

Submit a Pull Request

• Create an issue or propose a feature request in GitHub Issues.
• Create a separate Pull Request for each feature or fix.

🛠️ Other Tools

• Semgrep VS Code Extension: Official Extension
• Semgrep IntelliJ Plugin: IntelliJ Plugin

👥 Community Projects

• Semgrep Rule Sets: Official Rule Repository
• MCP Server Implementation: mcp-server-semgrep