pick.tools

Semgrep semgrep

Static analysis and security scanning with Semgrep.

Auth
OAuth
Health
up probed
Vendor
semgrep.dev
Categories
dev-tools, security

Endpoint

https://mcp.semgrep.ai/mcp (streamable-http)

Authentication

OAuth. pick.tools does not relay OAuth servers in v1; connect your client to Semgrep directly and sign in there.

From an agent (picker mode): connect your MCP client directly to https://mcp.semgrep.ai/mcp (OAuth); pick.tools does not relay OAuth servers in v1

Tools (0)

No tools cached. pick.tools does not relay this server.

Calls, last 30 days

2026-10-07 to 2026-11-05 · 0 calls

No relayed calls in the last 30 days.

Probes

Last 7, newest at the top. Probes carry no credential.
Probed at Outcome HTTP Latency ms
oauth 401 104
oauth 401 101
oauth 401 158
oauth 401 113
oauth 401 151
oauth 401 110
oauth 401 102

Connect directly

Your client signs in to Semgrep itself; pick.tools is not in the path.

Claude Code

claude mcp add --transport http semgrep https://mcp.semgrep.ai/mcp

JSON config (mcpServers)

{
  "mcpServers": {
    "semgrep": {
      "type": "http",
      "url": "https://mcp.semgrep.ai/mcp"
    }
  }
}

For Semgrep

pick.tools probes this server hourly, without a credential, as pick.tools-probe/1 (+https://pick.tools/docs/for-vendors). For vendors lists the egress IPs and how to opt out.