Semgrep Mcp Marketplace
- 10 repo stars
- Updated July 22, 2026
- semgrep/mcp-marketplace
semgrep-mcp-marketplace is a Claude Code plugin that connects Semgrep static analysis commands and hooks into your coding agent.
About
semgrep-mcp-marketplace is the repository and Claude Code plugin home for bringing Semgrep static analysis into agent-driven development. developers shipping SaaS, APIs, or CLIs can invoke Semgrep-backed commands and hooks without leaving Claude Code, which tightens the loop between writing code and catching rule violations early. Install it when you are in the ship-and-secure part of the journey and want repeatable appsec checks aligned with Semgrep’s ecosystem rather than generic “please review security” prompts. The marketplace framing signals MCP-oriented distribution alongside traditional plugin install paths. Repository scale is small on stars, so pair it with your existing CI Semgrep jobs for production gates; treat the plugin as session-time signal, not a substitute for full pipeline policy.
- Official home for the Semgrep Claude Code plugin in an MCP marketplace repo
- Claude-oriented commands and hooks for Semgrep workflows
- Static analysis surfaced inside the agent instead of a separate-only CLI loop
- Single-plugin marketplace entry (plugin count 1)
- Community catalog listing with semgrep and plugin keywords
Semgrep Mcp Marketplace by the numbers
- Data as of Jul 23, 2026 (Skillselion catalog sync)
/plugin install semgrep-mcp-marketplace@semgrep/mcp-marketplaceAdd your badge
Show developers this plugin is listed on Skillselion. Paste this into your README.
| repo stars | ★ 10 |
|---|---|
| Last updated | July 22, 2026 |
| Repository | semgrep/mcp-marketplace ↗ |
What it does
Register Semgrep’s Claude Code plugin to run static analysis, Semgrep commands, and security-aware hooks from the agent session.
Who is it for?
Best when you already use or evaluating Semgrep and want in-session SAST and security hooks inside Claude Code.
Skip if: Projects that need only stylistic linting with no security rule engine or no Semgrep adoption appetite.
What you get
After install, you can trigger Semgrep-oriented plugin commands and hooks from Claude Code so findings surface while you are still fixing code.
- Semgrep-backed Claude Code plugin access
- Agent-invokable security commands and hooks
- MCP marketplace packaging for the Semgrep integration
Recommended Plugins
1mangesh1 Hipaa GuardianAI agent skill for HIPAA compliance - PHI/PII detection, code scanning, audit reports, and remediation guidance6
Abossenbroek Abossenbroek Claude PluginsCustom Claude Code plugins by abossenbroek2
Agentsecops SecopsagentkitSecurity operations toolkit for AI coding agents.181
Agent Sh EnhancePlugin structure and tool use analyzer - validates plugin.json, MCP tools, and security patterns3
Altic Dev EnvaultLet agents safely manage env variables6
Auth0 Agent SkillsAuth0 Agent Skills40How it compares
Semgrep MCP and Claude plugin integration for appsec, not a general brainstorming or planning methodology skill.
FAQ
Who is Semgrep Mcp Marketplace for?
It is for developers shipping code with Claude Code who want Semgrep static analysis and security hooks available from the agent.
When should I use Semgrep Mcp Marketplace?
Use it in the Ship phase during security review, pre-release hardening, or whenever you run Semgrep rules before merge.
How do I add Semgrep Mcp Marketplace to my agent?
Add the plugin from the semgrep/mcp-marketplace Claude Code marketplace entry and configure Semgrep per the repo instructions.