Skip to content
VS Code

Openlane MCP Server for VS Code

io.github.gregdog/mcp-server-theopenlane

MCP server for Openlane GRC: controls, evidence, policies, risks, workflows, and approvals.

client:VS Code transport:stdio runtime:oci

Install Openlane MCP Server in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "openlane-api-token",
      "description": "OPENLANE_API_TOKEN",
      "password": true
    },
    {
      "type": "promptString",
      "id": "openlane-organization-id",
      "description": "OPENLANE_ORGANIZATION_ID",
      "password": true
    },
    {
      "type": "promptString",
      "id": "openlane-base-url",
      "description": "OPENLANE_BASE_URL",
      "password": true
    },
    {
      "type": "promptString",
      "id": "openlane-allow-write",
      "description": "OPENLANE_ALLOW_WRITE",
      "password": true
    },
    {
      "type": "promptString",
      "id": "openlane-allow-delete",
      "description": "OPENLANE_ALLOW_DELETE",
      "password": true
    }
  ],
  "servers": {
    "mcp-server-theopenlane": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-theopenlane:v0.7.1"
      ],
      "env": {
        "OPENLANE_API_TOKEN": "${input:openlane-api-token}",
        "OPENLANE_ORGANIZATION_ID": "${input:openlane-organization-id}",
        "OPENLANE_BASE_URL": "${input:openlane-base-url}",
        "OPENLANE_ALLOW_WRITE": "${input:openlane-allow-write}",
        "OPENLANE_ALLOW_DELETE": "${input:openlane-allow-delete}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

Openlane MCP Server in other clients