How to Use the CrowdSec MCP in VS Code Copilot

Give your entire engineering team access to CrowdSec threat intelligence directly inside VS Code Copilot.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect CrowdSec MCP to VS Code Copilot

Create your Vinkius account to connect CrowdSec to VS Code Copilot and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup CrowdSec with VS Code Copilot

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Share Global Threat Intel in VS Code

The `get_cti_smoke` tool brings global IP reputation checks to every developer in your organization. When a team member investigates a suspicious request in their logs, they can ask their editor for the address's background. The agent queries the CTI database and returns the exact attack vectors associated with that IP. Your engineers get immediate context on potential threats without needing individual API keys for a separate dashboard.

Inspect Active LAPI Bans

With the `get_decisions` tool, any developer on the project can see what the local security engine is currently blocking. This ends the constant Slack messages asking ops if a specific test IP got banned. They just open the chat panel and ask. The agent reads the active decisions from the local API and lists out the exact subnets and reasons for the blocks, keeping the team focused on writing code.

Team-Wide Threat Streams via MCP Server

The `get_decisions_stream` tool lets this MCP Server broadcast security updates across your development environment. Engineers building incident response tools can poll the local engine for the latest ban deltas. The agent fetches newly added or deleted decisions and uses that live data to help write parsing logic. Your team builds better security automation because the AI sees the actual event structures as they happen.

Setup guide

Set up CrowdSec MCP in VS Code Copilot

Prerequisites

VS Code 1.99 or later with GitHub Copilot extension
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Open the Command Palette (Cmd+Shift+P / Ctrl+Shift+P) and run "MCP: Add Server". Select HTTP (Streamable) as the server type. VS Code will create .vscode/mcp.json in your workspace.
2

Add the CrowdSec MCP

Paste the JSON snippet shown on the right into your .vscode/mcp.json. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Switch to Agent mode

Open Copilot Chat (Cmd+Shift+I / Ctrl+Shift+I) and switch to Agent mode using the dropdown. MCP tools are only available in Agent mode — they do not appear in Edit or Ask modes.
4

Verify the connection

In the Copilot Chat input, type # to list available tools. You should see the CrowdSec tools listed. Try asking: "List my recent CrowdSec transactions" and Copilot will invoke them automatically.

.vscode/mcp.json

{
  "mcpServers": {
    "crowdsec-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by CrowdSec. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect CrowdSec now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about CrowdSec MCP in VS Code Copilot

Commit a .vscode/mcp.json file to your repository root. Once pushed, every developer who opens the project gets immediate access to this MCP Server and the threat intelligence tools.

These tools are strictly read-only. Your developers can pull IP reputation scores and check active bans, but the agent cannot write new rules or remove existing blocks.

No. The shared configuration handles the connection to your local API and the CTI database. The team just asks questions in the chat panel to get the data.

It removes friction. When an engineer sees a weird log entry while debugging, they can investigate the IP right there instead of breaking focus to log into a separate security portal.

This setup only processes the specific IP strings and ban metadata requested during a chat session. Your proprietary source code, internal network topology, and customer databases remain entirely isolated from the external threat registry.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript