Integration · VS Code
Secure VS Code AI agents with a local MCP gateway
VS Code’s agent integrations execute tool calls with your local privileges. The model deciding what to run has no knowledge of which systems are production, what your compliance rules forbid, or what last week’s incident taught your team.
Mergen is the local control plane in between: a stdio MCP proxy that evaluates every tool call against rules a human wrote or approved — deterministically, in under 1ms, entirely on your machine.
What is covered, precisely
- Every MCP tools/call in VS Code is intercepted unconditionally (.vscode/mcp.json ships in the repo).
- The Mergen VS Code extension adds status, account sign-in, and gate visibility — enforcement itself lives in the local server, not the editor.
- Terminal commands outside MCP are not intercepted — use `mergen-server exec -- <cmd>`.
Set up in two minutes
Install the server
npm install -g mergen-serverConfigure VS Code
mergen-server setupStart the gate
mergen-server startWhat gets stopped
gcloud projects delete my-prod-projectCloud-destructive operations are hard-blocked by immutable policy.
npm publish (from an agent session)Supply-chain-sensitive actions escalate to HOLD for a human decision.
git reset --hard && git clean -fdxWork-destroying combinations are matched structurally, not by string.
Human-in-the-loop approvals
Held calls notify Slack with approve/deny buttons; identity is signature-verified and RBAC-mapped. Decisions resolve the suspended call in place.