Integration

Semgrep integration

Semgrep API for static analysis security scanning. Scan code for vulnerabilities, bugs, and compliance issues using lightweight semantic patterns. Supports 30+ programming languages with fast, deterministic analysis. Integrate into CI/CD pipelines, manage custom rules, and track findings across your organization. Ideal for DevSecOps workflows and secure software development.

Connect Semgrep How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in Semgrep.Built from the 8 Semgrep tools below, on the connection you add once.

Common Semgrep use cases

policy audit
rule discovery
scan monitoring
repository inventory
finding deployment IDs
vulnerability tracking
in-depth security review
vulnerability triage workflow
coverage analysis
security dashboard

What you can do with Semgrep

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Finding, 3 operations

get_findingGet findingGETRetrieves detailed information about a specific Semgrep finding. Returns full code context, data flow analysis, rule details, and remediation guidance for security review.
list_findingsList findingsGETLists security findings in a Semgrep deployment with filtering by severity, status, rule, and repository. Returns detailed findings with code location, rule information, and remediation guidance.
update_finding_statusUpdate finding statusPOSTUpdates the triage status of a Semgrep finding. Supports marking findings as open, ignored, fixed, or under review with documented reasons.

Deployment, 1 operation

list_deploymentsList deploymentsGETLists all Semgrep deployments the user belongs to. Returns deployment IDs, names, and slugs required for accessing projects, findings, and configuration.

Policy, 1 operation

get_policiesGet policiesGETRetrieves policy configurations for a Semgrep deployment. Returns rule sets, severity mappings, and blocking configurations that control scan behavior.

Project, 1 operation

list_projectsList projectsGETLists all projects in a Semgrep deployment. Returns project metadata including repository URLs, scan status, and finding counts for monitored codebases.

Rule, 1 operation

list_rulesList rulesGETLists Semgrep rules available in a deployment including registry rules, custom rules, and Pro rules. Returns rule definitions with severity, category, and language information.

Scan, 1 operation

get_scansGet scansGETLists scan history for a Semgrep deployment. Returns scan metadata including status, timing, finding counts, and triggering events for monitoring analysis activity.

Use Semgrep from Claude Code, Cursor or Codex

Connect Semgrep in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Semgrep operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect Semgrep

Create your workspace
Sign up free. Nothing to install.
Connect Semgrep once
Add your Semgrep connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

Semgrep integration FAQ

What can you do with the Semgrep integration?

LiveContext exposes 8 operations on Semgrep, covering finding, deployment, policy and project. Common uses include policy audit, rule discovery and scan monitoring.