How to Use the GitGuardian MCP in VS Code Copilot

Q: How do I set up the GitGuardian MCP Server for my team in VS Code Copilot?

Create a .vscode/mcp.json file in your repository root and add the GitGuardian server configuration. Once committed, any team member using VS Code Copilot can access the 49 security tools using their own API key.

Q: Can VS Code Copilot help me check my GitGuardian API usage?

Yes. You can ask Copilot to run getquotas to view your current scanning limits and usage history. This helps your team monitor API consumption and avoid running out of scanning capacity during heavy development periods.

Q: How does GitGuardian handle false positives in VS Code Copilot?

Your agent can run listcustomtags and getcustomtag to identify custom rules that filter out safe patterns. You can also run updatecustomtagfull to update existing exceptions and reduce alert fatigue across your team.

Q: Can I audit workspace security events using VS Code Copilot?

Yes. You can ask Copilot to run listauditlogs to view recent security events in your workspace. This allows you to track user actions, policy changes, and incident resolutions directly from your chat interface.

Q: Is my sensitive code sent to third parties when using GitGuardian with VS Code Copilot?

No. Only the specific code snippets you scan via scancontent are sent to GitGuardian's API for analysis. The VS Code Copilot MCP connection ensures your full codebase remains local, and all communications are encrypted to protect your proprietary intellectual property.

Secure your team's commits by scanning for secrets directly inside VS Code Copilot.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect GitGuardian MCP to VS Code Copilot

Create your Vinkius account to connect GitGuardian to VS Code Copilot and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup GitGuardian with VS Code Copilot

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Team-wide secret scanning in VS Code Copilot

Security theater doesn't work, but active scanning does. Commit a `.vscode/mcp.json` file to your repository to give your entire team access to the GitGuardian MCP Server. Developers can ask Copilot to run `scan_content` on their staged changes before pushing to remote branches. If a developer accidentally commits a secret, Copilot can run `scan_and_create_incidents` to automatically flag the leak. This keeps your main branch clean and reduces the burden on your security team.

Direct incident management and triage

When an alert triggers, your team can use VS Code Copilot to run `list_secret_incidents` and see what went wrong. Copilot pulls the incident history and severity, allowing developers to triage leaks without leaving their editor. Once the secret is rotated, run `resolve_secret_incident` to close the ticket. If the alert was triggered by a safe mock key, use `ignore_secret_incident` to dismiss the alert and keep your focus on real vulnerabilities.

Decoy deployment and monitoring

Build an active defense by asking VS Code Copilot to run the MCP Server to trigger `create_honeytoken` directly in your workspace. This generates fake credentials that you can place in your code to detect unauthorized access or repository leaks. You can monitor these traps by running `list_honeytoken_events` to see if any decoy has been triggered. Use `list_honeytoken_notes` to keep track of where each token was placed and who is responsible for monitoring it.

Setup guide

Set up GitGuardian MCP in VS Code Copilot

Prerequisites

VS Code 1.99 or later with GitHub Copilot extension
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Open the Command Palette (Cmd+Shift+P / Ctrl+Shift+P) and run "MCP: Add Server". Select HTTP (Streamable) as the server type. VS Code will create .vscode/mcp.json in your workspace.
2

Add the GitGuardian MCP

Paste the JSON snippet shown on the right into your .vscode/mcp.json. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Switch to Agent mode

Open Copilot Chat (Cmd+Shift+I / Ctrl+Shift+I) and switch to Agent mode using the dropdown. MCP tools are only available in Agent mode — they do not appear in Edit or Ask modes.
4

Verify the connection

In the Copilot Chat input, type # to list available tools. You should see the GitGuardian tools listed. Try asking: "List my recent GitGuardian transactions" and Copilot will invoke them automatically.

.vscode/mcp.json

{
  "mcpServers": {
    "gitguardian-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by GitGuardian. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect GitGuardian now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about GitGuardian MCP in VS Code Copilot

Create a `.vscode/mcp.json` file in your repository root and add the GitGuardian server configuration. Once committed, any team member using VS Code Copilot can access the 49 security tools using their own API key.

Yes. You can ask Copilot to run `get_quotas` to view your current scanning limits and usage history. This helps your team monitor API consumption and avoid running out of scanning capacity during heavy development periods.

Your agent can run `list_custom_tags` and `get_custom_tag` to identify custom rules that filter out safe patterns. You can also run `update_custom_tag_full` to update existing exceptions and reduce alert fatigue across your team.

Yes. You can ask Copilot to run `list_audit_logs` to view recent security events in your workspace. This allows you to track user actions, policy changes, and incident resolutions directly from your chat interface.

No. Only the specific code snippets you scan via `scan_content` are sent to GitGuardian's API for analysis. The VS Code Copilot MCP connection ensures your full codebase remains local, and all communications are encrypted to protect your proprietary intellectual property.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript