Install Semgrep in Claude Code
This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:
claude mcp add semgrep -- <command to start the server>Frequently asked questions
What does the Semgrep MCP server do?
Scan code for security vulnerabilities using Semgrep.
Is the Semgrep MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does Semgrep run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add Semgrep to Claude Code?
Follow the install steps in the project's README at https://github.com/semgrep/semgrep/tree/develop/cli/src/semgrep/mcp, then register it with "claude mcp add".
More security & identity MCP servers
View allIDA Pro
mrexodia/ida-pro-mcp
IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.
OpenWork MCP Gateway
different-ai/openwork
Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.
GhidraMCP
LaurieWired/GhidraMCP
Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.
NotFair
nowork-studio/notfair-plugin
OAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.
Jadx AI
zinja-coder/jadx-ai-mcp
JADX decompiler plugin providing live, LLM-assisted reverse engineering.
GoModel
ENTERPILOT/GoModel
Self-hosted gateway aggregating upstream MCP servers behind one authenticated HTTP endpoint.