Set up Semgrep Guardian with Kiro - Semgrep

Integrate Semgrep Guardian with Kiro through Kiro MCP. Kiro uses your locally installed Semgrep CLI to run Semgrep on your machine.

Prerequisites

A Semgrep account
Semgrep CLI installed and signed in

Setup

Install the Semgrep CLI first. Clicking the box below opens Kiro directly so you can add the server; it will not open a new browser tab.

Add to Kiro

Alternatively, add this file to your .kiro/settings/mcp.json:

{
  "mcpServers": {
    "semgrep": {
      "command": "semgrep",
      "args": ["mcp"],
      "env": {
        "SEMGREP_APP_TOKEN": "${SEMGREP_TOKEN}"
      }
    }
  }
}

What rules does this setup use?

This integration scans with the rules enabled for your Semgrep organization through your Policies. See Rules and configuration for how this differs from the Claude Code remote plugin.

Next steps

Enterprise deployment for authentication and organization-wide rollout
Semgrep Guardian overview
Rules and configuration