Skip to content
sentrasec

Connect GitHub Copilot

Add the Sentrasec MCP server to GitHub Copilot agent mode so it can scan and explain findings.

MCP is only available to Copilot in agent mode, which needs VS Code 1.99 or later. Ask Copilot in chat mode and it will not see these tools, whatever the configuration says.

This recipe is written against Copilot's documented MCP support and has not yet been verified end to end against a shipping Copilot build. The server itself is the same one the other clients use, so if Copilot starts it, the tools behave as documented. If the config shape below has drifted, trust GitHub's own MCP documentation over this page, and tell us so we can correct it.

Add the server

Create .vscode/mcp.json in your workspace, or add the server to your user settings to get it in every repository:

.vscode/mcp.json
{  "mcpServers": {    "sentrasec": {      "type": "stdio",      "command": "sentrasec",      "args": ["mcp", "serve"],      "env": {        "SENTRASEC_APP_ID": "app_...",        "SENTRASEC_APP_KEY": "sk_prod_..."      }    }  }}

Replace sk_prod_... with your API key. See Authentication for how to create one.

Use it

Reload the window, open Copilot Chat and switch the picker to Agent. The Sentrasec tools appear under the tools icon once the server connects. Then ask something like:

Scan this repository and summarise anything high severity.

Copilot asks for confirmation the first time it calls a tool. See the tools reference for everything the agent can call.