Connect your account, then chat with AI to run tools.
Semgrep is a static analysis tool for finding bugs, security vulnerabilities, and enforcing code standards. Provides pattern-based code scanning across 30+ languages with custom rule authoring.
Opens MCPBundles Studio with this server selected. After sign-in, chat and run tools from the same thread.
This server uses the MCP protocol with a live tool list. Tools are discovered when your MCP client connects (often after authentication), so they are not enumerated on this public page. Open Studio or connect from your client to see the tools available to your workspace.
Semgrep is a static analysis tool for finding bugs, security vulnerabilities, and enforcing code standards. Provides pattern-based code scanning across 30+ languages with custom rule authoring. It provides MCP tools that your client discovers when it connects (this page may not list every tool name) that AI agents can use through the Model Context Protocol (MCP).
Add the MCPBundles server URL to your MCP client configuration (Claude Desktop, Cursor, VS Code, etc.). The URL format is: https://mcp.mcpbundles.com/bundle/semgrep-mcp. Authentication is handled automatically.
Semgrep is a remote MCP server. The live tool list is supplied by the server when your MCP client connects, so the count is not fixed on this public page. After you connect in MCPBundles Studio or your client, you will see the tools your session can call.
Semgrep uses One-click sign in or No auth required. Semgrep requires credentials. Connect via MCPBundles and authentication is handled automatically.
Connect Semgrep to any MCP client in minutes
https://mcp.mcpbundles.com/bundle/semgrep-mcpThe link prefills the Add custom connector dialog — you still review the values and click Add, then Connect to complete OAuth.
Semgrep and paste the MCP URL into Remote MCP server URL.Custom connectors at claude.ai require a paid Claude plan (Pro, Max, Team, or Enterprise).
More security integrations you might like
OPUSWatch provides API-based solutions for managing operational risk and ensuring regulatory complia...
Intruder is a cybersecurity platform that offers automated vulnerability scanning to help businesses...
Container CVE triage and cross-source vulnerability intelligence: local Trivy scans via Desktop, NIS...
Microsoft Entra ID is an identity and access management service that provides secure authentication ...
Persona provides identity verification and authentication services, enabling businesses to verify cu...
The NIST National Vulnerability Database (NVD) is the U.S. government repository of standards-based ...
Operate Semgrep? You can take over the listing's metadata.
Take over this listing's metadata — name, description, category, logo, website, contact email, and skill content. Verification is a 6-digit code we email to one of the maintainer addresses your server already publishes in /.well-known/security.txt or /.well-known/mcpbundles.json. Free, takes about a minute.