Connect GitHub Copilot in VS Code to Agent Authority

Connect GitHub Copilot in VS Code to SecureAuth Agent Authority so every MCP tool call is checked and audited

When you finish, every MCP tool call GitHub Copilot makes is checked against your policies and recorded in the audit log. GitHub Copilot in VS Code reaches your approved tools through one SecureAuth Agent Authority gateway URL, and each developer signs in as themselves.

Setup

  1. Create MCP config. Create .vscode/mcp.json in your project (or run MCP: Open User Configuration from the Command Palette for global setup).

  2. Add the MCP server. Add the following to the file:

    {
      "servers": {
        "secureauth": {
          "type": "http",
          "url": "https://your-gateway-url/gateway/mcp"
        }
      }
    }
  3. Authenticate. A browser window will open for sign-in on first MCP tool use.

    The agent is auto-registered on first connect.

Connecting to just one MCP? To stay under an agent's tool limit, point the URL at a single MCP — /gateway/mcp/{slug} instead of /gateway/mcp. Grab the exact URL from the resource's detail page; see Scope a connection.

Next steps

  • Create a policy – control which tools Copilot can call.
  • Monitor activity – watch its tool calls appear in the dashboard and audit log.
  • Audit log – filter and search every tool call Copilot makes.

On this page