Set up Semgrep Guardian with GitHub Copilot

Integrate Semgrep Guardian with GitHub Copilot through MCP in Visual Studio, JetBrains IDEs, Xcode, or Eclipse. For Copilot in VS Code, see VS Code setup.

Prerequisites

A Semgrep account
Semgrep CLI installed and signed in

Setup

Install the Semgrep CLI.

  {
    "servers": {
      "semgrep": {
          "command": "semgrep",
          "args": ["mcp"]
      }
    }
  }

Follow your IDE’s instructions for where to put this entry: Extending Copilot Chat with MCP servers covers Visual Studio, JetBrains, Xcode, and Eclipse.

Restart your IDE and open Copilot Chat. Semgrep tools become available in Agent mode.

Copilot does not expose a post-write hook, so Semgrep tools are invoked when the agent calls them through MCP.

What rules does this setup use?

This integration scans with the rules enabled for your Semgrep organization through your Policies. See Rules and configuration for how this differs from the Claude Code remote plugin.

Next steps

Enterprise deployment for authentication and organization-wide rollout
Semgrep Guardian overview
Rules and configuration

Semgrep Guardian

Set up your coding agent

Using Semgrep Guardian

Deploy across your organization

Set up Semgrep Guardian with GitHub Copilot

Prerequisites

Setup

What rules does this setup use?

Next steps

​Prerequisites

​Setup

​What rules does this setup use?

​Next steps

Prerequisites

Setup

What rules does this setup use?

Next steps