Skip to main content
All connectors
qbash Connectors / SemGrep

Scan code with Semgrep from qbash.Then ask the model to explain each finding.

Use a connected Semgrep MCP server to inspect code in qbash. Ask the model to explain the scan findings and point to the affected code.

MCP server

Build a SemGrep MCP server

Give ChatGPT, Claude and your other AI tools access to SemGrep through one server. You pick which SemGrep tools it shares, and you can add other connectors, memory folders and Tasks to the same server.

How to set it up

  1. Connect SemGrep on the qbash Connectors page.
  2. Create an MCP server and add the SemGrep tools you want to share.
  3. Paste the server URL into your client. It connects with OAuth or an access token.

qbash

Review a code sample for security findings

Supply the code you want checked and ask for findings tied to specific lines.

Scan this Python handler with Semgrep. For each finding, show the rule, affected line, and a proposed fix. Keep scan findings separate from additional suggestions.

Available tools

Code scanning

Scan supplied code with the rules supported by the connected server.

Finding review

Explain reported issues and inspect suggested changes with their rule context.

Semgrep MCP server

Ways to use SemGrep

Review a handler

Scan a request handler and discuss the reported findings before editing it.

Rule development

Use a server with custom-rule support to check whether a rule matches the supplied code sample.

How to connect SemGrep

Authentication depends on the Semgrep server you connect. Access to Semgrep AppSec Platform findings requires a Semgrep token.

Open the SemGrep connector in qbash and check its connection settings. For a custom remote server, supply its HTTP or SSE URL and the authentication required by its operator.

MCP connectors

SemGrep MCP questions

Who runs the Semgrep MCP server?

Semgrep does. The server now ships in the main semgrep binary, and Semgrep also runs a hosted beta at mcp.semgrep.ai/mcp that it describes as experimental. qbash connects to whichever of these you configure.

Can a Python task call Semgrep?

No. Semgrep has no methods in the qbash Task SDK, so its tools run from qbash.

Use SemGrep with qbash

Connect the server and enable its tools in qbash.

Connect to qbash