Connect your agent

Check your dependencies in every Copilot chat.

Three steps, about a minute. No account, no key: the agent sends package names, never versions, and compares the answer with your lockfile.

  1. 01

    Add the MCP server

    One click opens VS Code and adds it. Or paste this in .vscode/mcp.json in your project.

    .vscode/mcp.jsonAdd to VS Code
    {
      "servers": {
        "patchwire": {
          "type": "http",
          "url": "https://patchwire.monowire.dev/mcp"
        }
      }
    }
  2. 02

    Add one line to AGENTS.md

    At the root of your workspace. VS Code attaches AGENTS.md to every chat request (the chat.useAgentsMdFile setting, on by default).

    AGENTS.md
    At the start of each session, and before you install, upgrade or deploy: call Patchwire get_advisories with the dependency names from package.json, compare the returned ranges with the lockfile, and use latest_safe to pick a fixed version for anything affected.
  3. 03

    Ask Copilot in agent mode

    Open Copilot Chat, pick Agent, and ask anything: it checks the packages in package.json against Patchwire first. An organization policy can restrict MCP servers; ask your admin if Patchwire does not show.

Claude Code. Set up in a minute.

One command adds the server, then a SessionStart hook: in every new session, Claude checks before it answers.

Open the Claude Code setup

Set up? Now watch your stacks.

The dashboard shows every alert on the stacks you follow, read every hour from the source.

Open the dashboard