Set up Semgrep Guardian with VS Code - Semgrep

Integrate Semgrep Guardian with VS Code through MCP servers.

Prerequisites

A Semgrep account
Semgrep CLI installed and signed in

Setup

1

Install the Semgrep CLI.

2

Add the Semgrep MCP server to VS Code. Create .vscode/mcp.json in your workspace (or run the MCP: Open User Configuration command from the Command Palette for a user-wide entry) and paste the following:

  {
    "servers": {
      "semgrep": {
          "command": "semgrep",
          "args": ["mcp"]
      }
    }
  }

3

Reload VS Code. Semgrep tools become available in the Copilot Chat Agent mode.

VS Code does not expose a post-write hook today, so Semgrep tools are invoked when the agent calls them through MCP.

What rules does this setup use?

This integration has no Guardian-specific policy available. It pulls all rules enabled on Policies. See Rules and configuration for how this differs from the Claude Code and Codex plugins.

Next steps

Enterprise deployment for authentication and organization-wide rollout
Semgrep Guardian overview
Rules and configuration