VS Code CopilotIDE

UpGuard MCP Server

Bring Attack Surface
to VS Code Copilot

Name: UpGuard MCP Server
Price: 29 USD
Availability: InStock
Rating: 5.0 (1 reviews)
Author: Vinkius

Learn how to connect UpGuard to VS Code Copilot and start using 9 AI agent tools in minutes. Fully managed, enterprise secure, and ready to use without writing a single line of code.

GDPR Free for Subscribers

Get VendorList Account RisksList Identity BreachesList Monitored DomainsList Monitored IpsList Saas AppsList User RisksList Vendor RisksList Vendors

Unlock for AI Agents

Ask AI about this MCP Server ChatGPT Claude Perplexity

Compatible with every major AI agent and IDE

Claude

ChatGPT

Cursor

Gemini

Windsurf

VS Code

JetBrains

Vercel

+ other MCP clients

What is the UpGuard MCP Server?

Connect your UpGuard account to any AI agent and simplify how you monitor your attack surface, assess third-party vendor risks, and protect your organization's digital assets through natural conversation.

What you can do

Vendor Risk Assessment — List and query all monitored vendors to retrieve their security scores and metadata.
Risk Monitoring — List active security risks detected across your own infrastructure (BreachSight) and your vendor network (VendorRisk).
Data Breach Tracking — Monitor identity breaches affecting your workforce and retrieve detailed breach reports.
Asset Visibility — List monitored domains, IP ranges, and SaaS applications to understand your digital footprint.
Employee Security — Audit user-related risk data and identity theft exposures directly via AI commands.

How it works

Subscribe to this server
Enter your UpGuard API Key (found in your account settings)
Start managing your cybersecurity posture from Claude, Cursor, or any MCP client

Who is this for?

CISO & Security Analysts — quickly check security scores and identify critical infrastructure risks via simple AI queries.
Procurement & Compliance — verify vendor risk profiles and monitor third-party security posture directly from the workspace.
IT Operations — track monitored domains and IPs to maintain a secure and up-to-date asset inventory.

Built-in capabilities (9)

get_vendor

Get details for a specific vendor

list_account_risks

List all active risks for the account

list_identity_breaches

List identity breaches

list_monitored_domains

List monitored domains

list_monitored_ips

List monitored IP addresses

list_saas_apps

List monitored SaaS applications

list_user_risks

List users and their risk data

list_vendor_risks

List active risks for a vendor

list_vendors

List all monitored vendors

Why VS Code Copilot?

GitHub Copilot Agent mode brings UpGuard data directly into your VS Code workflow. With a project-scoped config, the entire team shares access to 9 tools. Copilot queries live data, generates typed code, and writes tests from actual API responses, all without leaving the editor.

—
VS Code is used by over 70% of developers. adding MCP tools to Copilot means your team can leverage external data without leaving their primary editor
—
Project-scoped MCP configs (.vscode/mcp.json) let you commit server configurations to your repository, ensuring the entire team shares the same tool access
—
Copilot's Agent mode integrates MCP tools seamlessly with file editing, terminal commands, and workspace search in a single agentic loop
—
GitHub's enterprise compliance and audit features extend to MCP tool usage, providing visibility into how AI interacts with external services

See it in action

UpGuard in VS Code Copilot

AI Agent→Vinkius

High Security·Kill Switch·Plug and Play

Why Vinkius

UpGuard and 4,000+ other MCP servers. One platform. One governance layer.

Teams that connect UpGuard to VS Code Copilot through Vinkius don't need to source, host, or maintain individual MCP servers. Every tool call runs inside a hardened runtime with credential isolation, DLP, and a signed audit chain.

4,000+MCP Servers ready

<40msCold start

60%Token savings

	Raw MCP	Vinkius
Server catalog	Find and host yourself	4,000+ managed
Infrastructure	Self-hosted	Sandboxed V8 isolates
Credential handling	Plaintext in config	Vault + runtime injection
Data loss prevention	None	Configurable DLP policies
Kill switch	None	Global instant shutdown
Financial circuit breakers	None	Per-server limits + alerts
Audit trail	None	Ed25519 signed logs
SIEM log streaming	None	Splunk, Datadog, Webhook
Honeytokens	None	Canary alerts on leak
Custom domains	Not applicable	DNS challenge verified
GDPR compliance	Manual effort	Automated purge + export

Unlock for AI Agents View step-by-step setup guide for VS Code Copilot →

Enterprise Security

Why teams choose Vinkius for UpGuard in VS Code Copilot

The UpGuard MCP Server runs on Vinkius-managed infrastructure inside AWS — a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts. All 9 tools execute in hardened sandboxes optimized for native MCP execution.

Your AI agents in VS Code Copilot only access the data you authorize, with DLP that blocks sensitive information from ever reaching the model, kill switch for instant shutdown, and up to 60% token savings. Enterprise-grade infrastructure, zero maintenance.

Unlock for AI Agents View full UpGuard details →

Fully ManagedVinkius Servers

60%Token savings

High SecurityEnterprise-grade

IAMAccess control

EU AI ActCompliant

DLPData protection

V8 IsolateSandboxed

Ed25519Audit chain

<40msKill switch

Stream every event to Splunk, Datadog, or your own webhook in real-time

* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure

The Vinkius Advantage

How Vinkius secures
UpGuard for VS Code Copilot

Every tool call from VS Code Copilot to the UpGuard MCP Server is protected by DLP redaction, cryptographic audit chains, V8 sandbox isolation, kill switch, and financial circuit breakers.

< 40msCold start

Ed25519Signed audit chain

60%Token savings

FAQ

Frequently asked questions

How do I check the security score of a specific vendor?

Use the get_vendor tool and provide the Vendor ID. Your agent will retrieve the complete security profile, including the overall score and metadata for that vendor.

Can I see all active risks across my entire account?

Yes! Use the list_account_risks query. This retrieves all active security risks detected across your own digital infrastructure (BreachSight).

Is it possible to monitor data breaches affecting our employees?

Absolutely. Use the list_identity_breaches query to retrieve data on identity breaches affecting your workforce, helping you take proactive security measures.

Which VS Code version supports MCP?

MCP support requires VS Code 1.99 or later with the GitHub Copilot extension. Ensure both are updated to the latest version. Older versions of Copilot may not expose the Agent mode toggle.

How do I switch to Agent mode?

Open the Copilot Chat panel and look for two mode options: "Ask" and "Agent". Click "Agent" to enable autonomous tool calling. In Ask mode, Copilot provides conversational answers but cannot invoke MCP tools.

Can I restrict which MCP tools Copilot can access?

Yes. VS Code shows a tool consent dialog before any MCP tool is invoked for the first time. You can also configure tool access policies at the organization level through GitHub Copilot settings.

Does MCP work in VS Code Remote or Codespaces?

Yes. MCP servers configured via .vscode/mcp.json work in Remote SSH, WSL, and GitHub Codespaces environments. The MCP connection is established from the remote host, so ensure the server URL is accessible from that environment.