GRC Lake for VS Code

io.github.koda-ai-studio/grc-lake

Read-only connectors; local writes. Evidence and assessments for agents. Only people approve.

client:VS Code transport:stdio runtime:pypi

Install GRC Lake in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "grc-lake-lake",
      "description": "GRC_LAKE_LAKE",
      "password": true
    },
    {
      "type": "promptString",
      "id": "grc-lake-mcp-mode",
      "description": "GRC_LAKE_MCP_MODE",
      "password": true
    },
    {
      "type": "promptString",
      "id": "grc-lake-api-url",
      "description": "GRC_LAKE_API_URL",
      "password": true
    },
    {
      "type": "promptString",
      "id": "grc-lake-api-key",
      "description": "GRC_LAKE_API_KEY",
      "password": true
    }
  ],
  "servers": {
    "grc-lake": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "grc-lake"
      ],
      "env": {
        "GRC_LAKE_LAKE": "${input:grc-lake-lake}",
        "GRC_LAKE_MCP_MODE": "${input:grc-lake-mcp-mode}",
        "GRC_LAKE_API_URL": "${input:grc-lake-api-url}",
        "GRC_LAKE_API_KEY": "${input:grc-lake-api-key}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

GRC Lake in other clients

GRC Lake MCP server