Integration · VS Code
Secure VS Code AI agents with a local execution gate
VS Code’s agent integrations execute tool calls with your local privileges. The model deciding what to run has no knowledge of which systems are production, what your compliance rules forbid, or what last week’s incident taught your team.
Mergen is the local control plane in between: it evaluates every tool call against rules a human wrote or approved, deterministically, in under 1ms, entirely on your machine.
What is covered, precisely
- Plain VS Code has no AI-agent hook at the platform level, so the Mergen VS Code extension watches every text-document change directly and self-heals a block-severity edit right after it lands, a detect-and-revert, not a pre-write block.
- The extension also adds status, account sign-in, and gate visibility for the local server.
- Terminal commands outside this surface are not intercepted: use `mergen-server exec -- <cmd>`.
Set up in two minutes
Install the server
npm install -g mergen-serverConfigure VS Code
mergen-server setupStart the gate
mergen-server startWhat gets stopped
gcloud projects delete my-prod-projectCloud-destructive operations are hard-blocked by immutable policy.
npm publish (from an agent session)Supply-chain-sensitive actions escalate to HOLD for a human decision.
git reset --hard && git clean -fdxWork-destroying combinations are matched structurally, not by string.
Human-in-the-loop approvals
Held calls notify Slack with approve/deny buttons; identity is signature-verified and RBAC-mapped. Decisions resolve the suspended call in place.