VS Code Integration
Use Inkog with GitHub Copilot in VS Code for security-aware coding assistance.
VS Code MCP support is available through GitHub Copilot’s MCP integration (currently in preview).
Installation
Prerequisites
- VS Code 1.95+
- GitHub Copilot extension
- Node.js 18+
Get your API key
Sign up at app.inkog.io and copy your API key.
Configure MCP in VS Code
Open your VS Code settings.json and add:
settings.json
{
"github.copilot.mcp.servers": {
"inkog": {
"command": "npx",
"args": ["-y", "@inkog-io/mcp"],
"env": {
"INKOG_API_KEY": "sk_live_your_api_key"
}
}
}
}Restart VS Code
Reload VS Code to activate the MCP server.
Usage
With Copilot Chat, you can ask:
Security Analysis
“Use Inkog to check this file for AI agent vulnerabilities”
Governance Verification
“Verify my AGENTS.md file matches the code”
Compliance
“Generate an EU AI Act compliance report”
Example Workflow
- Open your AI agent code
- Open Copilot Chat (
Cmd+Shift+I/Ctrl+Shift+I) - Ask: “Scan this agent for security issues with Inkog”
- Review findings and ask for fixes
- Apply suggested changes
Alternative: Task Integration
You can also run Inkog as a VS Code task:
.vscode/tasks.json
{
"version": "2.0.0",
"tasks": [
{
"label": "Inkog Security Scan",
"type": "shell",
"command": "npx",
"args": ["-y", "@inkog-io/mcp"],
"problemMatcher": []
}
]
}Troubleshooting
MCP Not Available?
Ensure you have GitHub Copilot with MCP support enabled. This feature is rolling out gradually.
Next Steps
- MCP Server Reference - Full tool documentation
- CLI - Use Inkog from the command line
- GitHub Action - Automate scans in CI/CD
Last updated on