Prerequisites
- A Semgrep account
- Semgrep CLI installed and signed in
Setup
Install the Semgrep CLI, then add the Semgrep MCP Server to your IDE. Semgrep provides sample configuration information that you can use as a starting point. Refer to your IDE’s documentation for specific details on where to add the MCP server configuration. If your IDE supports a post-write or post-tool hook, point it atsemgrep mcp -k post-tool-cli-scan -a <ide-name> to scan generated code automatically. The Devin (Windsurf) page shows this pattern.
What rules does this setup use?
This integration scans with the rules enabled for your Semgrep organization through your Policies. See Rules and configuration for how this differs from the Claude Code remote plugin.Next steps
- Enterprise deployment for authentication and organization-wide rollout
- Semgrep Guardian overview
- Rules and configuration