GitHub Copilot CLI

Fit

GitHub Copilot CLI is a good current fit for SecureMCP-Lite.

GitHub documents local MCP server support for Copilot CLI.

Recommended setup

Use the CLI flow GitHub documents for adding local MCP servers, or edit ~/.copilot/mcp-config.json directly.

Example:

{
  "mcpServers": {
    "repo-guard": {
      "type": "local",
      "command": "npx",
      "args": [
        "securemcp-lite",
        "start",
        "--target",
        "npx -y @modelcontextprotocol/server-filesystem .",
        "--target-cwd",
        "/absolute/path/to/project",
        "--config",
        "/absolute/path/to/project/secure-mcp.yml"
      ],
      "env": {},
      "tools": ["*"]
    }
  }
}

Rollout steps

1. create or validate secure-mcp.yml
2. add the local MCP server entry
3. reload Copilot CLI MCP servers if needed
4. verify one safe call and one blocked call

Suggested rollout

• start with a read-only filesystem policy
• confirm Copilot can use read tools
• confirm out-of-policy tool calls are rejected locally

Documentation source

• GitHub Copilot CLI MCP docs: https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/add-mcp-serversExternal