Deus Witness for VS Code
io.github.sipkigroup/witness
MCP proxy: holds risky tool calls for passkey approval; signed receipts you can check offline.
client:VS Code
transport:stdio
runtime:pypi
Install Deus Witness in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "deus-witness-key",
"description": "DEUS_WITNESS_KEY",
"password": true
},
{
"type": "promptString",
"id": "deus-witness-url",
"description": "DEUS_WITNESS_URL",
"password": true
}
],
"servers": {
"witness": {
"type": "stdio",
"command": "uvx",
"args": [
"deus-witness"
],
"env": {
"DEUS_WITNESS_KEY": "${input:deus-witness-key}",
"DEUS_WITNESS_URL": "${input:deus-witness-url}"
}
}
}
}
VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs