Back to Home
ramblingenzyme icon

vscode-refactor-mcp

Verified Safe

by ramblingenzyme

Overview

A VSCode extension hosting an IPC server to enable external MCP (Model Context Protocol) servers to proxy VSCode API calls for refactoring and code manipulation.

Installation

Run Command
npm start -w packages/server

Environment Variables

  • VSCODE_MCP_SOCKET_PATH

Security Notes

The system utilizes local Inter-Process Communication (Unix Domain Sockets/Named Pipes) for communication between the VSCode extension and the MCP server, limiting external network exposure. Socket paths are dynamically generated per workspace, enhancing isolation. Data is exchanged as JSON strings, which are parsed by the extension. While standard, if a malicious MCP server were to connect and send malformed JSON, it could potentially lead to unexpected behavior or crashes. The primary security boundary relies on the MCP server being a trusted component of the system, as it instructs the extension to perform sensitive VSCode API calls like file renames and symbol renames. No 'eval' or obvious hardcoded secrets were found.

Similar Servers

Stats

Interest Score31
Security Score8
Cost ClassLow
Avg Tokens50
Stars1
Forks0
Last Update2025-12-11

Tags

RefactoringVSCode ExtensionIPCMCPCode Manipulation