Check your dependencies in every Copilot chat.
Three steps, about a minute. No account, no key: the agent sends package names, never versions, and compares the answer with your lockfile.
- 01
Add the MCP server
One click opens VS Code and adds it. Or paste this in
.vscode/mcp.jsonin your project..vscode/mcp.jsonAdd to VS Code{ "servers": { "patchwire": { "type": "http", "url": "https://patchwire.monowire.dev/mcp" } } } - 02
Add one line to AGENTS.md
At the root of your workspace. VS Code attaches AGENTS.md to every chat request (the
chat.useAgentsMdFilesetting, on by default).AGENTS.mdAt the start of each session, and before you install, upgrade or deploy: call Patchwire get_advisories with the dependency names from package.json, compare the returned ranges with the lockfile, and use latest_safe to pick a fixed version for anything affected.
- 03
Ask Copilot in agent mode
Open Copilot Chat, pick Agent, and ask anything: it checks the packages in package.json against Patchwire first. An organization policy can restrict MCP servers; ask your admin if Patchwire does not show.
Claude Code. Set up in a minute.
One command adds the server, then a SessionStart hook: in every new session, Claude checks before it answers.
Open the Claude Code setupSet up? Now watch your stacks.
The dashboard shows every alert on the stacks you follow, read every hour from the source.
Open the dashboard