GitHub Copilot Chat setup

GitHub Copilot Chat doesn't natively speak MCP. We ship a CLI wrapper that exposes our 5 tools as slash commands.

Prerequisites

Install the wrapper

npm install -g @security-scanner/copilot-cli

Set your API key:

export SCANNER_API_KEY=ss_live_...

Add a VS Code task that wraps the CLI

In .vscode/tasks.json:

{
  "version": "2.0.0",
  "tasks": [
    {
      "label": "scan: invoke scanner-copilot",
      "type": "shell",
      "command": "scanner-copilot ${input:command}",
      "problemMatcher": [],
      "presentation": { "reveal": "always", "panel": "shared" }
    }
  ],
  "inputs": [
    { "id": "command", "type": "promptString", "description": "Scanner command (e.g. 'scan example.com')" }
  ]
}

Use it

In Copilot Chat:

/run scan: invoke scanner-copilot scan example.com

Or open the Command Palette → "Tasks: Run Task" → pick the task → enter scan example.com.

Available slash commands

CommandWhat it does
scanner-copilot scan <url>Start a scan
scanner-copilot findings <id>List findings for a scan
scanner-copilot status <id>Poll scan status
scanner-copilot fix <fid>Generate an AI code fix
scanner-copilot apply <fid>Apply + retest

Limitations