Integrations

Integrations

Plug xgrep into AI agents (MCP), CI pipelines (SARIF), and Mondoo Platform.

Integrations

  • MCP server — expose scan, graph, and inspect capabilities to AI agents over the Model Context Protocol.
  • CI — wire xgrep into GitHub Actions (the official mondoohq/actions/xgrep action or a manual SARIF / Code Scanning setup), GitLab CI (SAST), and Azure DevOps (SARIF Scans tab + Boards work items), including install, diff-aware PR scans, and exit-code gating.
  • Mondoo Platform — publish findings to Mondoo Platform (automatic when a service account is configured; --incognito to disable), where they attach to the scanned repository as an asset and join your security posture.

Looking to run xgrep in your editor? See IDE integration.

Code graph

Build and query xgrep's code graph — callers, callees, call paths, and inlined-source neighborhoods.

MCP server

Run xgrep as a Model Context Protocol server for AI agents — the full tool list, inputs, and how it differs from the CLI.

On this page

Integrations