Prerequisites
- A Semgrep account
- Semgrep CLI installed and signed in
Setup
Install the Semgrep CLI, then add the Semgrep MCP Server to your IDE. Semgrep provides sample configuration information that you can use as a starting point. Refer to your IDE’s documentation for specific details on where to add the MCP server configuration. If your IDE supports a post-write or post-tool hook, point it atsemgrep mcp -k post-tool-cli-scan -a <ide-name> to scan generated code automatically. The Devin (Windsurf) page shows this pattern.
What rules does this setup use?
This integration has no Guardian-specific policy available. It pulls all rules enabled on Policies. See Rules and configuration for how this differs from the Claude Code and Codex plugins.Next steps
- Enterprise deployment for authentication and organization-wide rollout
- Semgrep Guardian overview
- Rules and configuration