GitHub Copilot
GitHub / Microsoft · Everything the hub tracks about GitHub Copilot: MCP Clients, AI Plugins, IDE Integrations, AI Pricing, AI Security.
MCP Clients
VS Code (GitHub Copilot)
Yes: Tools, Resources, Prompts, Local (stdio), Remote (HTTP/SSE)
Partial: OAuth sign-in
4 of 10 unknown
Full mcp detail →AI Plugins
GitHub Copilot / VS Code plugins
Yes: Public directory, MCP-based, Bundles skills, Hooks, Private / custom, Git marketplaces, Org admin controls, Agent Plugins standard
Partial: OAuth sign-in
1 of 10 unknown
Full plugins detail →IDE Integrations
GitHub Copilot
Yes: Inline completion, Agent mode, MCP, VS Code, JetBrains, Visual Studio, Xcode, Eclipse, Zed
Partial: BYO model / key, Neovim
1 of 12 unknown
Full ides detail →AI Pricing
GitHub Copilot
Free tier: Yes: Copilot Free, 2,000 completions per month
Free $0, Pro $10, Pro+ $39, Max $100, Business $19/granted seat, Enterprise $39/granted seat
All 7 plans →AI Security
GitHub Copilot (VS Code)
Yes: Tool-call approval prompts, Audit logs, Security disclosure page
Partial: Per-tool allow / deny, Sandboxing, OAuth for remote MCP, Admin allowlists
3 of 10 unknown
Full security detail →Security advisories (18)
10 high · 5 medium · 1 low · 2 not ratedSecurity Feature Bypass via Shared MCP Sandbox Permission Approvals
VS Code (Copilot Chat / MCP) · CVE-2026-102851 · GHSA-qghm-w43w-vx8v
Remote Code Execution via Custom Hook Edits in the Copilot Harness
VS Code (Copilot Chat / MCP) · CVE-2026-102232 · GHSA-fq62-m6f5-c7h9
Information Disclosure through Automatic Remote Image Fetch in Chat
VS Code (Copilot Chat / MCP) · CVE-2026-81380 · GHSA-vww8-mqc2-4x8v
Azure DevOps access token disclosure through GitHub Copilot Chat workspace settings
VS Code (Copilot Chat / MCP) · CVE-2026-81381 · GHSA-rvgr-2w56-2j67
Agent Network Filter Bypass Vulnerability
VS Code (Copilot Chat / MCP) · CVE-2026-81379 · GHSA-hr37-8jwr-q8p8
Visual Studio Code MCP gallery metadata path traversal
VS Code (Copilot Chat / MCP) · CVE-2026-81377 · GHSA-g6p5-6xp8-5jwg
Agent Network Filter Security Feature Bypass
VS Code (Copilot Chat / MCP) · CVE-2026-81357 · GHSA-4xcg-6mm5-hj26
Agent Network Filter Security Feature Bypass
VS Code (Copilot Chat / MCP) · CVE-2026-81378 · GHSA-4gv7-q2x8-32p8
Remote code execution through workspace-configured remote agent host connections
VS Code (Copilot Chat / MCP) · CVE-2026-78462 · GHSA-2cmq-rv52-5rf6
Agent network filter bypass via IPv4-mapped IPv6 literals
VS Code (Copilot Chat / MCP) · CVE-2026-69306 · GHSA-6xp2-9cj3-f488
Copilot Custom Agent Hook Remote Code Execution Vulnerability
VS Code (Copilot Chat / MCP) · CVE-2026-70335 · GHSA-w79w-rj9h-vg4f
Copilot Chat Security Feature Bypass Vulnerability
VS Code (Copilot Chat / MCP) · CVE-2026-65675 · GHSA-3hjg-cwxj-qfc6
Nil Pointer Dereference DoS in completion/complete Handler
GitHub MCP Server · CVE-2026-47427 · GHSA-w4q6-qw23-4rg7
Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion
GitHub MCP Server · CVE-2026-48529 · GHSA-pjp5-fpmr-3349
MCP Deeplink Install Lacked Essential Information
VS Code (Copilot Chat / MCP) · CVE-2026-41613 · GHSA-9f6c-63gp-pwpf
Workspace trust for MCP servers
VS Code (Copilot Chat / MCP) · CVE-2026-21518 · GHSA-6xq8-9qf3-p6qv
Recent updates
Copilot is still the widest IDE footprint
GitHub's feature matrix lists agent mode and MCP in VS Code, Visual Studio, JetBrains, Eclipse and Xcode. Neovim stays completion-only, and BYOK is GA only in Visual Studio.
VS Code (Copilot Chat / MCP): Security Feature Bypass via Shared MCP Sandbox Permission Approvals
Medium. Status: patched. CVE-2026-102851 · GHSA-qghm-w43w-vx8v. VS Code (Copilot Chat / MCP) advisory.
VS Code (Copilot Chat / MCP): Remote Code Execution via Custom Hook Edits in the Copilot Harness
High. Status: patched. CVE-2026-102232 · GHSA-fq62-m6f5-c7h9. VS Code (Copilot Chat / MCP) advisory.
VS Code (Copilot Chat / MCP): Information Disclosure through Automatic Remote Image Fetch in Chat
Medium (CVSS 5.3). Status: patched. CVE-2026-81380 · GHSA-vww8-mqc2-4x8v. VS Code (Copilot Chat / MCP) advisory.
VS Code (Copilot Chat / MCP): Azure DevOps access token disclosure through GitHub Copilot Chat workspace settings
Medium (CVSS 6.5). Status: patched. CVE-2026-81381 · GHSA-rvgr-2w56-2j67. VS Code (Copilot Chat / MCP) advisory.
VS Code (Copilot Chat / MCP): Agent Network Filter Bypass Vulnerability
High (CVSS 8.2). Status: patched. CVE-2026-81379 · GHSA-hr37-8jwr-q8p8. VS Code (Copilot Chat / MCP) advisory.
VS Code (Copilot Chat / MCP): Visual Studio Code MCP gallery metadata path traversal
Medium (CVSS 6.5). Status: patched. CVE-2026-81377 · GHSA-g6p5-6xp8-5jwg. VS Code (Copilot Chat / MCP) advisory.
VS Code (Copilot Chat / MCP): Agent Network Filter Security Feature Bypass
High (CVSS 8.2). Status: patched. CVE-2026-81378 · GHSA-4gv7-q2x8-32p8. VS Code (Copilot Chat / MCP) advisory.
VS Code (Copilot Chat / MCP): Remote code execution through workspace-configured remote agent host connections
High (CVSS 8.8). Status: patched. CVE-2026-78462 · GHSA-2cmq-rv52-5rf6. VS Code (Copilot Chat / MCP) advisory.
Copilot CLI adds the new protocol and CIMD OAuth
1.0.81 adds the 2026-07-28 protocol; 1.0.83 adds CIMD for OAuth.
Other tools
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.