• REPORTING
  • TRIAGE
  • AUDIT
  • HUMAN

How to pull security metrics with your AI

Connect Semgrep to your AI client to turn scan data into clear security insights. Once connected, you can query your entire deployment through natural language.

Ask AI about this page

Short answer

How can I get security metrics from Semgrep using AI?

Your AI uses the Semgrep MCP to fetch project lists and specific health metrics. You can then ask it to calculate fix rates or summarize compliance status across your repositories. This gives you a direct line to your security posture without manual exports.

Data outcomes

Security insights delivered to your chat.

The AI handles the data retrieval so you can focus on the analysis.

REPORTING

Automated health scores

The AI pulls data to show how your projects are performing. You get a clear picture of security health without digging through dashboards.

TRIAGE

Fix rate tracking

Ask how fast your team is resolving vulnerabilities. The AI calculates these rates based on your actual Semgrep deployment data.

AUDIT

Compliance snapshots

Get instant updates on how your code meets specific security standards. The AI summarizes compliance data for your review.

HUMAN

Strategic decisions

The AI provides the numbers, but you decide which security policies to change. You interpret the trends to guide your team's next steps.

The workflow

What your AI does when the data arrives.

The AI acts as a bridge between your Semgrep deployment and your conversation.

  1. Identify projects

    The AI scans your Semgrep environment to find all active repositories and security scans.

    list_projects

  2. Fetch metrics

    Once it knows which projects to look at, the AI pulls the specific security data you requested.

    get_metrics

  3. Analyze trends

    The AI compares different data points to find patterns in your security posture.

    get_metrics

  4. Summarize findings

    The AI turns the raw numbers into a readable summary for your reports.

    get_metrics

Try it

Copy these to start.

Use these prompts to begin interacting with your Semgrep data.

Starting points

These are basic requests. Swap out the project names or metric types to match your specific needs.

Semgrep Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_419UaVAC33VwJmeeVBLCqRf2d8eEEPrGrsnPeNVU/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Semgrep capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "semgrep-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_419UaVAC33VwJmeeVBLCqRf2d8eEEPrGrsnPeNVU/mcp"
    }
  }
}
Copy into chat04

  • List all my projects in Semgrep and show me their current health scores.

  • What is the fix rate for the 'auth-service' repository?

  • Summarize the compliance status for all my production projects.

  • Which project has the highest number of unresolved vulnerabilities?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Semgrep once, then ask.

Just link your account once. Your credentials stay encrypted, and you can immediately start asking questions in your preferred AI client.

Connect Semgrep to your AI

FAQ

How this task behaves.

  • 01

    Can the AI change my Semgrep settings?

    No. The AI can only read data from your deployment. It cannot modify your security policies or configurations.

  • 02

    Can the AI delete any security findings?

    No. The AI has no permission to delete or edit findings in Semgrep.

  • 03

    Do I need to export CSVs first?

    No. The AI pulls the data directly from Semgrep using the connected tools.

  • 04

    Can it see all my projects?

    Yes, it can see any project that the connected account has permission to access.

  • 05

    Does the AI store my code?

    No. The AI only accesses the specific metrics and project metadata provided by the Semgrep tools.

  • More questions about Semgrep? The Connector page answers them. See everything the Semgrep Connector can do

Connect Semgrep to Claude, Cursor, ChatGPT & more