How to Connect Semgrep Remote MCP to Cursor

Add Semgrep's remote MCP server to Cursor in about a minute.

๐Ÿ›ก๏ธ Officialโœ“ VerifiedHTTP + SSEPublic ยท No Authยทhttps://mcp.semgrep.ai/mcp

Step-by-step

  1. Open MCP settings
    Cursor โ†’ Settings โ†’ MCP, or edit ~/.cursor/mcp.json (global) / .cursor/mcp.json (project).
  2. Add the server
    Use the one-click deeplink above, or add "semgrep": { "url": https://mcp.semgrep.ai/mcp } under mcpServers.
  3. Authorize
    No authentication needed โ€” Semgrep MCP is public.
  4. Verify
    Verify in the browser: paste https://mcp.semgrep.ai/mcp into remotemcp.net/inspector and run initialize + tools/list.

Troubleshooting OAuth / 401

  • A 401 Unauthorized on first connect is normal โ€” the endpoint is OAuth-protected; let Cursor finish the browser consent flow.
  • If the consent window never opens, remove and re-add the server, then retry.
  • Check the exact challenge at our OAuth debugger.
  • Run the live endpoint through the online inspector to see the raw JSON-RPC exchange.
HTTP + SSEhttps://mcp.semgrep.ai/mcp
Legacy SSE endpoint
SSEhttps://mcp.semgrep.ai/sse
Install in Cursor โ†’

Or add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "semgrep": {
      "url": "https://mcp.semgrep.ai/mcp"
    }
  }
}

Tools exposed by Semgrep MCP (3)

ToolSafetyDescriptionParameters
semgrep_scan๐ŸŸข ReadScan a code snippet with Semgrep rules and return findings.code*: stringlanguage: string
security_check๐ŸŸข ReadRun a security-focused check over provided code files.codeFiles*: arrayconfig: string
get_abstract_syntax_tree๐ŸŸข ReadReturn the abstract syntax tree Semgrep builds for a code snippet.code*: stringlanguage: string

Connect Semgrep MCP to another client

Other servers for Cursor

GitHub's official remote MCP server hosted at api.githubcopilot.com. Gives AI agents first-party access to repositories, issues, pull requests and code search.

https://api.githubcopilot.com/mcp/
๐Ÿ›ก๏ธ Officialโœ“ VerifiedStreamable HTTPOAuth 2.15 toolsOnline232ms
Notion MCPNotion Labs

Notion's official hosted MCP server. Agents can search your workspace, read and create pages, and query databases over Streamable HTTP or SSE.

https://mcp.notion.com/mcp
๐Ÿ›ก๏ธ Officialโœ“ VerifiedHTTP + SSEOAuth 2.15 toolsOnline26ms
Linear MCPLinear Orbit Inc.

Linear's official remote MCP server. Agents can search, create and update issues and query your team's workflow over Streamable HTTP or SSE.

https://mcp.linear.app/mcp
๐Ÿ›ก๏ธ Officialโœ“ VerifiedHTTP + SSEOAuth 2.14 toolsOnline7ms

Figma's official remote MCP server. Agents can pull design context, variables, Code Connect mappings and screenshots from your Figma files.

https://mcp.figma.com/mcp
๐Ÿ›ก๏ธ Officialโœ“ VerifiedStreamable HTTPOAuth 2.14 toolsOnline42ms

Stripe's official remote MCP server at mcp.stripe.com. Agents can query customers, payment intents and subscriptions and invoke Stripe API operations with OAuth.

https://mcp.stripe.com
๐Ÿ›ก๏ธ Officialโœ“ VerifiedStreamable HTTPOAuth 2.15 toolsOnline62ms

Cloudflare's free, authless documentation MCP server. Agents can search the full Cloudflare docs corpus โ€” no account or token required.

https://docs.mcp.cloudflare.com/mcp
๐Ÿ›ก๏ธ Officialโœ“ VerifiedHTTP + SSEPublic ยท No Auth2 toolsOnline10ms