Integrations / VS Code Plugin

JFrog VS Code Plugin

Microsoft and JFrog have partnered to bring software supply chain governance into VS Code. The agent plugin connects GitHub Copilot to the JFrog Platform through the JFrog MCP Registry andRead More >

Agent Guard, enforcing package security, license compliance, and approved MCP access as code is written. Read Less >

Start Free Book a Demo

VS Code Plugin Features

Governed MCP Access Through the JFrog MCP Registry

Copilot in VS Code reaches only the MCP servers approved for your project. The Agent Guard runs as a local proxy that wraps each approved server individually and enforces your organization’s tool policies on every agent call, with no CLI setup required.

Natural-Language Platform Operations

Developers prompt Copilot to handle repository management, project provisioning, and vulnerability scanning through JFrog Platform Skills, without context switching out of the editor to perform routine platform tasks.

Real-Time Upstream Governance

The agent checks policy before dependencies are pulled, enforcing package security, license compliance, and provenance validation as code is written rather than through manual handoffs later in the release cycle.

Organization-Wide Enforcement via MDM Policy

Administrators lock governance in place with an enterprise MCP allowlist deployed through an MDM tool such as Jamf, Intune, Kandji, or Mosyle. Delegated agent sessions are disabled by default so they cannot be used to bypass the allowlist.
Related Resources
JFrog Blog

Unlock the Power of Agents with JFrog’s Skills and MCP Tools

Read
Documentation

Documentation on the JFrog VS Code IDE Plugin (security Scanning)

Read

About Microsoft Visual Studio Code

Visual Studio Code is Microsoft’s open-source code editor, with GitHub Copilot as its integrated AI assistant. Agent Plugins is an open standard for packaging agent skills and MCP servers portably across GitHub Copilot in VS Code, the Copilot CLI, and the Copilot app.
Learn More