NewsOperate As is live. Send your first client one link

Integration

Semgrep

Code security scanning: findings, projects and deployments. Your client pastes their Semgrep key once, and your agent or your code works with their access.

Developer tools

About Semgrep

Semgrep scans code for security issues.

Once your client connects Semgrep, your agent can work with findings, projects and deployments.

Semgrep

Semgrep · Developer tools

API key

Code security scanning: findings, projects and deployments

The client pastes their API key from Semgrep's settings. We store it encrypted.

Tested against Semgrep's live API.

Building with Semgrep? The docs have setup steps and code for every tool.

Open the Semgrep docs

Tools

Your agent calls any endpoint of Semgrep's API with the request tool, with the client's access attached.

Base URL for request

https://semgrep.dev/api/v1

  • request

    HTTPS ANY /v1/clients/{clientId}/semgrep/{path}

    Any endpoint of Semgrep's own API, with the client's access attached.

    servicestringrequired
    This service: semgrep
    methodstringrequired
    GET, POST, PUT, PATCH or DELETE
    pathstringrequired
    The path under https://semgrep.dev/api/v1
    queryobjectoptional
    Query parameters
    bodyobjectoptional
    A JSON body

Over MCP every tool also takes client_id, from list_clients. Over HTTPS send it as clientId to https://api.operate.as/v1.

What the client approves

  • Use the Semgrep key you paste, with only the access you gave that key

Get started

Send your next client one link

Add a client, select the services, copy the link. You'll get an email the moment their access is ready. Start free, no card required. Paid plans are one flat monthly price, and a busy month never takes your agents offline.