Install Semgrep in Claude Code
claude mcp add --transport http semgrep-2 https://mcp.semgrep.ai/mcp{
"mcpServers": {
"semgrep-2": {
"url": "https://mcp.semgrep.ai/mcp"
}
}
}Your client opens a browser window to sign in on first use.
Frequently asked questions
What does the Semgrep MCP server do?
Scan code for security and correctness findings with Semgrep rules.
Is the Semgrep MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does Semgrep run locally or remotely?
Remote. Hosted by the provider. You connect with a URL, nothing to install.
How do I add Semgrep to Claude Code?
Run: claude mcp add --transport http semgrep-2 https://mcp.semgrep.ai/mcp
More security & identity MCP servers
View allSite Passport
Check whether AI agents can safely operate a WordPress site: llms.txt, robots.txt and schema.org.
Sealmyapp Tools
toby7979/sealmyapp-tools
Offline security helpers for AI-built (vibe-coded) apps: classify whether a key is safe to expose, generate Supabase RLS audit SQL and owner-only policy templates, and pre-launch checklists for Lovable, Bolt, Cursor, Replit and v0. Ships with a Cursor rule and an Agent Skill.
Sitelemetry
Audit sites you own for security, SEO, AI readiness, accessibility, performance and integrations.
ScreenSeal
Sanctions-screening signal for AI agents: check a person or organization against OFAC and EU lists.
Skillguard
epistemedeus/skillguard
Static scanner that checks Claude Code skills, plugins and MCP servers for exfiltration, install hooks and prompt injection before you install them.
ScanMalware
Scan URLs in a sandboxed browser and pivot across past scans by domain, IP, ASN or fingerprint.