Give coding agents (Copilot Chat, Claude Code, Cursor, thing that speaks MCP — or thing that tin ammunition out) unrecorded entree to everything that lives wrong VS Code and third-party extensions.
Explore the codification pinch the devices the editor already has: Find References, Go-to-Definition, hover types, workspace diagnostics, git blame, awesome outlines, and immoderate bid a third-party hold registers.
Modify the codification done the aforesaid connection server that powers the editor: structural rename, quick-fixes and refactors, shape imports, safe file create/rename/delete via WorkspaceEdit, formatter output, root actions. Edits go done the connection server — safer than sed/awk connected files because they respect scope, imports, and semantics.
Implant exposes a azygous MCP tool, run_vscode_script, that executes a JavaScript snippet wrong the moving VS Code hold big pinch afloat entree to the vscode.* API. Nothing runs without the personification approving the nonstop snippet.
Quick start
- Install the extension.
- Open your project. Implant will connection to instal itself into the workspace — this drops portable norm files that thatch agents erstwhile to scope for Implant.
- Your supplier picks up the instrumentality automatically — MCP-native clients (Copilot Chat and others connected VS Code ≥ 1.101) observe it via the registry, and CLI agents pick it up from the workspace instructions installed successful measurement 2.
- When an supplier invokes the tool, a webview opens beside the editor showing the script pinch syntax highlighting. Click Run, Run + spot session, or Deny.
Palette commands
| Implant: Install into Workspace | Writes 5 portable, safe-to-commit files: .vscode/implant/call.js (stdio↔HTTP MCP proxy), .mcp.json (Claude Code / generic MCP config), .cursor/mcp.json (Cursor MCP config), .claude/skills/implant/SKILL.md (Claude Code skill), .cursor/rules/implant.mdc (Cursor rules). Also upserts an <!-- BEGIN Implant --> … <!-- END Implant --> conception into .github/copilot-instructions.md. Prompts earlier overwriting; asks which files successful multi-root workspaces. |
| Implant: Copy Agent Instructions | Copies the aforesaid instructions to the clipboard — paste into AGENTS.md, an agent's strategy prompt, aliases wherever your setup expects. |
Settings
| implant.requireConfirmation | true | Show the support webview earlier each book runs. |
| implant.timeoutMs | 0 | Hard execution timeout successful ms. 0 disables it — long-running async scripts are cancelled by the personification via a notification that appears aft 10 seconds. Set to a affirmative worth to enforce an automatic precocious bound. |
| implant.port | 0 | Port for the HTTP MCP server. 0 picks an ephemeral one; the existent larboard is written to .vscode/implant/session.yml. |
The support webview has a Run + spot session fastener that skips future prompts until the model is reloaded.
Safety notes
- Snippets tally successful the VS Code hold big pinch the aforesaid privileges arsenic the extension itself. There is nary sandbox — that is the full point.
- The support webview exists truthful you tin eyeball each snippet earlier it runs. Turn confirmation disconnected only erstwhile the supplier is already successful a tight reappraisal loop.
- The HTTP server only binds to 127.0.0.1 and requires a per-session bearer token — the token lives successful .vscode/implant/session.yml (mode 0600, gitignored, regenerated connected each activation). Requests without a valid token get 401 and raise a informing notification truthful you announcement thing poking astatine the port.
- Even pinch the token gate, don't tally this connected a shared machine: immoderate process running arsenic your personification tin publication the convention file.
- The confirmation punctual is the past statement of defense. Only turn implant.requireConfirmation disconnected erstwhile the supplier is already successful a tight review loop that you trust.
English (US) · 
Indonesian (ID) ·