Set up Semgrep Guardian with GitHub Copilot

Integrate Semgrep Guardian with GitHub Copilot through MCP in Visual Studio, JetBrains IDEs, Xcode, or Eclipse. For Copilot in VS Code, see VS Code setup.

Prerequisites

A Semgrep account
Semgrep CLI installed and signed in

Setup

Install the Semgrep CLI.

  {
    "servers": {
      "semgrep": {
          "command": "semgrep",
          "args": ["mcp"]
      }
    }
  }

Follow your IDE’s instructions for where to put this entry: Extending Copilot Chat with MCP servers covers Visual Studio, JetBrains, Xcode, and Eclipse.

Restart your IDE and open Copilot Chat. Semgrep tools become available in Agent mode.

Copilot does not expose a post-write hook, so Semgrep tools are invoked when the agent calls them through MCP.

What rules does this setup use?

This integration has no Guardian-specific policy available. It pulls all rules enabled on Policies. See Rules and configuration for how this differs from the Claude Code and Codex plugins.

Next steps

Enterprise deployment for authentication and organization-wide rollout
Semgrep Guardian overview
Rules and configuration

Semgrep Guardian

Set up your coding agent

Using Semgrep Guardian

Deploy across your organization

Set up Semgrep Guardian with GitHub Copilot

Prerequisites

Setup

What rules does this setup use?

Next steps

​Prerequisites

​Setup

​What rules does this setup use?

​Next steps

Prerequisites

Setup

What rules does this setup use?

Next steps