← Discover MCPs and Agents
c
MCPDeveloper toolsMCP Registry

copilot-advanced-security-plugin

The official GitHub Copilot Advanced Security plugin

Links

Repository

README

From the repo.

Copilot Advanced Security Plugin

Security-focused plugin that brings GitHub Advanced Security capabilities into AI coding workflows through skills and MCP integrations.

What it does

The plugin helps agents identify and prevent credential exposure during development by:

  • Scanning code snippets, files, and git changes for potential secrets
  • Using GitHub secret detection patterns through MCP tooling
  • Supporting pre-commit checks to catch leaked credentials early

What's Inside

  • Skills - reusable capabilities that AI agents can invoke to perform specific tasks

Getting Started

This plugin requires the GitHub MCP Server. It works with any MCP-compatible AI agent or client, and is not limited to GitHub Copilot.

Authentication: When using GitHub Copilot, authentication is handled automatically. For other clients (e.g., Cursor), you must include an Authorization header with a Bearer ${GITHUB_TOKEN}.

By default, Copilot CPI and VS Code don't enable the toolsets required by the skills in this repository. To simplify setup and usage, this plugin includes a preconfigured .mcp.json file with the appropriate defaults.

Install

Install or enable the plugin in your preferred AI agent or client. For example, VS Code, using Agent plugins or using Copilot CLI via copilot plugins install. This plugin is already accessible in the default marketplaces exposed by both.

Usage

Ask your AI coding agent to use these security capabilities in natural language. For example:

You: "Scan my staged changes for secrets before I commit"
Agent: Uses the secret scanning capability and reports the result
✅ Staged changes are clean

Contributing

We'd love your contributions! Please read our Contributing Guide for details on how to submit pull requests.

License

This project is licensed under the MIT License.

Collected info

  • ★ 18 stars
  • ⎇ 6 forks
  • Source updated: 5/7/2026

Config for your environment

Replace {MCP_ENDPOINT_URL} with this MCP’s endpoint URL (from its repo or docs above). No API key — you connect directly.

Tool

OS

Config file: ~/.cursor/mcp.json

{
  "mcpServers": {
    "mcp-server": {
      "url": "{MCP_ENDPOINT_URL}"
    }
  }
}

Paste into mcpServers in the config file. Restart Cursor after saving.

If this MCP is also published on mcpchannel.ai, you can subscribe from Browse and use the gateway config there instead.