How to Use the Cerbos (Access Control) MCP in VS Code Copilot

Q: How do I configure Cerbos (Access Control) for my team in VS Code Copilot?

Create a .vscode/mcp.json file in your repository root and define the server. Once committed, any team member using VS Code Copilot will have access to the tools via this MCP Server.

Q: Can VS Code Copilot validate Cerbos (Access Control) schemas?

Yes, Copilot uses getschema and addschema to validate your JSON schemas. This prevents invalid structures from being committed to your codebase.

Q: Can I check the health of my authorization server from the chat?

Yes, you can ask Copilot to run gethealth or getserverinfo to check if your policy engine is running and see its current build version.

Share Cerbos policy tools across your entire engineering team inside VS Code Copilot with a single configuration file.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Cerbos (Access Control) MCP to VS Code Copilot

Create your Vinkius account to connect Cerbos (Access Control) to VS Code Copilot and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Cerbos (Access Control) with VS Code Copilot

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Standardize auth testing across your team

By committing a `.vscode/mcp.json` file to your repository, every developer on your team gets instant access to the Cerbos tools. Your team can use VS Code Copilot to run `check_resources` and verify access rules without setting up custom testing scripts. This ensures everyone tests their code against the same authorization rules. It eliminates the 'works on my machine' excuse when it comes to security permissions.

Manage policies inside VS Code Copilot

When you need to modify a rule, you can ask VS Code Copilot to run `update_policy` or `disable_policy` right from the chat sidebar. You don't need to remember complex CLI flags or navigate administrative consoles. This MCP Server lets your team query `get_policy` to review active rules and apply changes instantly. It makes managing enterprise access control as simple as describing the change to your editor.

Audit production access rules in the editor

If a production access issue arises, developers can use VS Code Copilot to inspect logs via `list_audit_logs`. It pulls the raw audit data straight into the editor, allowing for rapid debugging of permission failures. Copilot can correlate these logs with your active schemas using `get_schema` to pinpoint exactly why a request was denied. It turns a complex security investigation into a quick, guided review.

Setup guide

Set up Cerbos (Access Control) MCP in VS Code Copilot

Prerequisites

VS Code 1.99 or later with GitHub Copilot extension
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Open the Command Palette (Cmd+Shift+P / Ctrl+Shift+P) and run "MCP: Add Server". Select HTTP (Streamable) as the server type. VS Code will create .vscode/mcp.json in your workspace.
2

Add the Cerbos (Access Control) MCP

Paste the JSON snippet shown on the right into your .vscode/mcp.json. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Switch to Agent mode

Open Copilot Chat (Cmd+Shift+I / Ctrl+Shift+I) and switch to Agent mode using the dropdown. MCP tools are only available in Agent mode — they do not appear in Edit or Ask modes.
4

Verify the connection

In the Copilot Chat input, type # to list available tools. You should see the Cerbos (Access Control) tools listed. Try asking: "List my recent Cerbos (Access Control) transactions" and Copilot will invoke them automatically.

.vscode/mcp.json

{
  "mcpServers": {
    "cerbos-access-control-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Cerbos. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Cerbos (Access Control) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Cerbos (Access Control) MCP in VS Code Copilot

Create a `.vscode/mcp.json` file in your repository root and define the server. Once committed, any team member using VS Code Copilot will have access to the tools via this MCP Server.

Yes, Copilot uses `get_schema` and `add_schema` to validate your JSON schemas. This prevents invalid structures from being committed to your codebase.

Yes, since the MCP Server configuration is stored in your workspace settings, multiple developers can interact with the same Cerbos instance through their own Copilot chat interfaces.

Yes, you can ask Copilot to run `get_health` or `get_server_info` to check if your policy engine is running and see its current build version.

No, the server runs locally or in your private sandbox. Your sensitive policies, schemas, and audit logs are queried locally, and only the specific tool outputs required to answer your prompt are sent to the LLM.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript