> ## Documentation Index
> Fetch the complete documentation index at: https://docs.semgrep.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Semgrep MCP (beta)

> Connect Claude Code, Codex, Cursor, VS Code, or another MCP client to Semgrep AppSec Platform to work with findings, scans, and policies.

Semgrep AppSec Platform provides a hosted Model Context Protocol (MCP) server. Connect your AI agent to the hosted MCP server to search and triage findings, generate fixes, debug scans, and manage policies from your editor or terminal.

> [!NOTE]
>
> To scan code locally as your agent writes it, use [Semgrep Guardian](https://docs.semgrep.dev/semgrep-guardian/overview.md), which runs the MCP server with `semgrep mcp`.

With the hosted MCP server, you can:

* Search and filter findings, triage them in bulk, and read finding history.
* Generate fixes, inspect failed scans, and start new scans.
* Look up projects, dependencies, and advisories.
* Test rules, manage policies, and open Jira or Linear tickets.

If your agent only needs to investigate, connect it to the [read-only URL](https://docs.semgrep.dev/mcp/authentication.md#read-only-url) instead. It provides only the tools that read data.

Available tools depend on your role or token scope, your organization's plan, and the URL you connect to. For more information, see [Tools and capabilities](https://docs.semgrep.dev/mcp/tools.md).

## Prerequisites

* An AppSec Platform account in an organization on a Teams or Enterprise plan, including trials.
* An MCP client that supports remote servers over HTTP, such as Claude Code, Codex, Cursor, or VS Code.

## Get started

> [card] [Authentication and access](https://docs.semgrep.dev/mcp/authentication.md)
>
> Find the server URL for your deployment, choose between OAuth and an API token, and limit access with the read-only URL.

> [card] [Connect an MCP client](https://docs.semgrep.dev/mcp/connect/claude-code.md)
>
> Add the hosted MCP server to Claude Code, Codex, Cursor, VS Code, or another MCP client.

> [card] [Tools and capabilities](https://docs.semgrep.dev/mcp/tools.md)
>
> See what your agent can do with findings, fixes, scans, rules, policies, and integrations.

> [card] [Run scans and workflows](https://docs.semgrep.dev/mcp/run-scans-and-workflows.md)
>
> Start rule-based scans, AI-powered detection scans, and Agentic Workflows jobs from your agent.

> [card] [Troubleshooting](https://docs.semgrep.dev/mcp/troubleshooting.md)
>
> Fix common connection, permission, and plan errors.