Connect VS Code to the ARMO MCP server to ask about your vulnerabilities, posture, runtime incidents and attack paths while you code.

This is separate from the Visual Studio Code IDE plugin (Integrations > IDE plugins), which scans your code in the editor.

Connect

Use the Install in VS Code button on the armo-mcp repository, or:

1. Open the Command Palette and run MCP: Add Server.
2. Select HTTP.
3. Enter your region's server URL, for example https://api.armosec.io/mcp

4. To share the setting with a project, add it to .vscode/mcp.json:

{"servers": { "armo": { "type": "http", "url": "https://api.armosec.io/mcp" } }}

5. VS Code prompts you to sign in to ARMO the first time a tool runs.