Semgrep MCP

Code security scanning for vulnerabilities, supply chain, and secrets

MCPCategory: devPopularity 76semgrep-mcp

Code security scanning for vulnerabilities, supply chain, and secrets

Open in dashboard →

See the live tool list, OAuth status, and recent calls.

Install command

Run the install command shown below to add this plugin to your workspace.

Install

hrbr plugins install semgrep-mcp

Harbor connects to https://mcp.semgrep.ai/mcp via http transport.

Quick start

hrbr exec 'return await semgrep_mcp.list({ limit: 5 })'

Or from a Function:

import { defineOrbitJob } from "@hrbr/orbit";

export default defineOrbitJob({
  name: "semgrep-mcp-example",
  handler: async (ctx) => {
    return await ctx.plugins.semgrep_mcp.list({ limit: 5 });
  },
});

Tools

Tool list is fetched at runtime from the MCP server. Search by intent before invoking:

hrbr plugins tools semgrep-mcp
hrbr tools search "<your intent>" --describe

Or open the dashboard plugin page for the live tool list.