Home › Clients › VS Code › Security & Identity
VS Code: Security & Identity
VS Code setup for Security & Identity. 7 indexed servers in this category, 3 with a remote endpoint. Named here: Gitlab, Auth0, Snyk. VS Code reads MCP servers from mcp.json, using either a mcpServers object or a servers object. Those shapes are quoted on the VS Code hub from the VS Code docs. The VS Code block on each server page is generated from that server's registry entry and can differ from the package name in the docs examples.
Category hub: Security & Identity. The same category for Claude and Cursor.
Paid listings (Sponsored, then Featured) appear first in every list, marked Advertisement. Organic listings follow, sorted by GitHub stars. Sorted by GitHub stars as of 2026-10-17. Servers with no public GitHub repo follow, in alphabetical order.
- Gitlab — stdio (local, npm). Gitlab is Zereight's MCP server in the official registry (io.github.zereight/gitlab-mcp). Declared transport: stdio (local, npm). · ★ 2,049 GitHub stars · 2026-10-17
- Auth0 — stdio (local, npm). Manages Auth0 tenants (applications, APIs, actions, logs, forms) through conversational requests. · ★ 122 GitHub stars · 2026-10-17
- Snyk — stdio (local, npm). Runs Snyk security scans from an agent so vulnerabilities can be found and fixed in code. · ★ 58 GitHub stars · 2026-10-17
- OSCAL (AWS Labs) — stdio (local, pypi). An AWS Labs server for OSCAL security-control documents. It is a different registry entry from the AWS MCP Server. · ★ 52 GitHub stars · 2026-10-17
- WorkOS — Streamable HTTP (remote). WorkOS's hosted server for organizations, users, SSO, Directory Sync, and AuthKit. · ★ 45 GitHub stars · 2026-10-17
- VirusTotal — Streamable HTTP (remote), stdio (local, pypi). VirusTotal's server for threat reports and file or URL submissions. A remote endpoint and a package are both declared. · ★ 21 GitHub stars · 2026-10-17
- Microsoft Sentinel — Streamable HTTP (remote). Microsoft's hosted server for exploring security data in a Sentinel data lake. · ★ 1 GitHub stars · 2026-10-17