Set up Semgrep Guardian with Kiro - Semgrep

Integrate Semgrep Guardian with Kiro through Kiro MCP. Kiro uses your locally installed Semgrep CLI to run Semgrep on your machine.

Prerequisites

A Semgrep account
Semgrep CLI installed and signed in

Setup

Install the Semgrep CLI first. Clicking the box below opens Kiro directly so you can add the server; it will not open a new browser tab.

Add to Kiro

Alternatively, add this file to your .kiro/settings/mcp.json:

{
  "mcpServers": {
    "semgrep": {
      "command": "semgrep",
      "args": ["mcp"],
      "env": {
        "SEMGREP_APP_TOKEN": "${SEMGREP_TOKEN}"
      }
    }
  }
}

What rules does this setup use?

This integration has no Guardian-specific policy available. It pulls all rules enabled on Policies. See Rules and configuration for how this differs from the Claude Code and Codex plugins.

Next steps

Enterprise deployment for authentication and organization-wide rollout
Semgrep Guardian overview
Rules and configuration