Skip to content
mcp/harbor
VS Code

safe upgrade for VS Code

io.github.white-hat-lab/safe-upgrade

Evidence-backed npm upgrade preflight and dependency audits for coding agents, paid via x402.

client:VS Code transport:stdio runtime:npm

Install safe upgrade in VS Code

.vscode/mcp.json 

{
  "inputs": [
    {
      "type": "promptString",
      "id": "payer-private-key",
      "description": "PAYER_PRIVATE_KEY",
      "password": true
    }
  ],
  "servers": {
    "safe-upgrade": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "safe-upgrade-mcp"
      ],
      "env": {
        "PAYER_PRIVATE_KEY": "${input:payer-private-key}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

safe upgrade in other clients

safe upgrade MCP server