Integrate Semgrep with Claude, Cursor, Chatbots & AI Agents MCP Server

Equip your AI agent with read/write access to Semgrep's SAST platform to audit code security findings, update triage statuses, and enforce custom semantic rules.

GDPR Free for Subscribers

Compatible with every major AI agent and IDE

Claude

ChatGPT

Cursor

Gemini

Windsurf

VS Code

JetBrains

Vercel

+ other MCP clients

create

Create rule on Semgrep

Allows developers to forbid project-specific bad patterns securely and continuously across the enterprise repositories. Create a customized Semgrep security rule within the platform

delete

Delete rule on Semgrep

Delete a custom Semgrep security rule from the deployment

get

Get finding details on Semgrep

Explains the exact malicious code block, suggests semantic fixes, states whether it is blocking PRs in CI, and links to CVE data (if an SCA supply chain defect). Get atomic details for a specific Semgrep flaw

get

Get metrics on Semgrep

Typically consumed to render executive security dashboards. Get AppSec metrics and compliance stats for Semgrep

get

Get project on Semgrep

Search for a precise Semgrep project by exact repository name

list

List deployments on Semgrep

The primary key is the deployment slug identifier. Almost all subsequent API operations targeting rules, projects, or findings will require this deployment slug to define the scope. List Semgrep organizational deployments

list

List findings on Semgrep

Findings provide snippet details, file line numbers, severity, and rule types. Fetch global static analysis security findings for a deployment

list

List projects on Semgrep

Projects maintain a link between developers and static security scan outputs over time. List Semgrep projects (repositories) monitored in a deployment

list

List rules on Semgrep

The rules are structured YAML definitions that search for semantic anti-patterns in codebases (e.g., unparameterized SQL queries, hardcoded AWS keys). List Semgrep semantic rules deployed globally

update

Update finding status on Semgrep

Valid states generally include active, fixed, false_positive, ignored, mitigated. Resolving findings through this API cleans up the developer experience when managing compliance queues. Mark a Semgrep finding state (e.g., fixed, false positive)

Security & Code Integrity Audit

Every tool in the Semgrep MCP Server is continuously audited by the Vinkius Security Engine. We guarantee zero-trust payload isolation, strict data boundaries, and deterministic execution for enterprise-grade AI agents.

A+Score: 100

How Vinkius protects your data

Do I need to supply a 'Deployment Slug' for every request?

Most API queries require the deployment context. To ensure smooth interactions, just tell the agent your organization slug once (or let it query list_deployments to fetch the default one). The agent will remember it for the rest of the conversation loop.

How does the AI access my passwords and credentials?

It simply doesn't. On Vinkius, your passwords, API keys, and login details are kept in a secure vault. The AI (like ChatGPT or Claude) merely "asks" Vinkius to perform the task. Vinkius opens the door, does the work, and hands the result back to the AI. Your credentials are never seen, read, or learned by the artificial intelligence.

What if the AI ends up reading customer data or confidential information?

We have a built-in digital "bodyguard" called DLP (Data Loss Prevention). If a tool fetches data and the response contains social security numbers, credit cards, or personal customer info, Vinkius magically blocks and erases that information before it is delivered to the AI. The AI works only with what is strictly necessary, and your sensitive data never leaks.

Does the AI train on my tools or API data?

No. Vinkius enforces a strict Zero-Retention policy. Your data simply passes through our secure servers to complete the requested action and is instantly forgotten. Nothing you do here is ever stored, logged, or used to train any artificial intelligence.

Automated Workflows using Semgrep

Add the Semgrep tool to your AI Agents. The toolkit allows Claude and ChatGPT to securely fetch and update targeted data.

AI Semantic Routing for sast

Use Semgrep to manage sast via conversational interfaces. The integration centralizes access control for fort knox operations performed by ChatGPT.

Intelligent sca Management

The Semgrep toolkit provides secure access to sca functions. It enables conversational agents to manage fort knox settings deterministically.