Set up Semgrep MCP in Continue

Static analysis security scanning with custom rules, AST analysis, and multi-language vulnerability detection. Official Semgrep implementation.

Locate the config file

Continue reads MCP server configuration from the following file:

~/.continue/config.yaml

Create this file if it does not already exist.

Add the following to your Continue config file:

yaml

mcpServers:
  - name: semgrep-mcp
    command: uvx
    args:
      - semgrep-mcp

No environment variables needed. Semgrep MCP works out of the box without any API keys or tokens.

Restart Continue. Semgrep MCP should appear in your MCP server list with 7 tools available.

This server adds approximately 3,500 tokens to your context window for tool definitions.