MCP semgrep_findings filters by branch and includes findings without AI verdicts
Introduced 2026-05-07 · score 0.93
HOW TO USE IT
To retrieve findings for a branch, call `semgrep_findings` with `refs` set to that branch. Omit `autotriage_verdict` to include findings without an AI verdict.
semgrep_findings(repos=["<owner>/<repository>"], refs=["<branch>"])WHY THIS HELPS
Retrieve Semgrep findings for a particular branch, including findings without an AI verdict.
REQUIREMENTS AND LIMITATIONS
- Version: v1.162.0
- Availability: MCP
- repos (required): Repository names to filter by, in `owner/repository` form; the tool returns an error if none are provided.
- refs: List of git refs (branch names) to filter findings by. If omitted, findings are filtered to the primary branch.
- autotriage_verdict: Verdict filter (`VERDICT_TRUE_POSITIVE` or `VERDICT_FALSE_POSITIVE`). Omit it to include findings with any verdict, including unrated findings.
- Prerequisite: Authenticate to Semgrep and have a deployment ID. API tokens must have the `webapi` role.
- The `refs` parameter defaults to the primary branch when unspecified.
- `autotriage_verdict` is optional.
FIRST-PARTY EVIDENCE
- https://github.com/semgrep/semgrep/releases/tag/v1.162.0
- https://github.com/semgrep/semgrep/blob/develop/cli/src/semgrep/mcp/server.py
Check the installed version and the source before using it. Entry JSON