How do I install Semgrep?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Semgrep need an API key?

No required environment variable is listed on this record.

Semgrep runs locally over stdio.

Last checked 2026-11-09. Scan code for security vulnerabilities using Semgrep.

Power your agent

Install from the publisher. Not a PlugMCP endpoint.

Host a copy with our keys and logs.

No packaged release in the registry yet. Follow the repository README.

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Local

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ