Implant 是一款 VS Code 扩展程序，为编码代理（如 Copilot Chat、Claude Code、Cursor）提供对 VS Code 内部 API 和第三方扩展的实时访问权限[1]。用户安装该扩展后，代理可自动获取名为 run_vscode_script 的单一 MCP 工具[1]，通过执行 JavaScript 代码片段来完成代码探索和修改操作[1]。
安全性方面采取了多重保障措施[1]。所有代码片段执行前均需获得用户批准，用户可选择跳过后续提示[1]；代码编辑通过语言服务器进行，相比直接文件操作更加安全[1]。HTTP 服务器仅绑定到本地地址 127.0.0.1，并需要每会话持有者令牌进行身份认证[1]。会话令牌存储在 .vscode/implant/session.yml 文件中，权限设置为 0600，由系统自动生成[1]。
Implant is a new Visual Studio Code extension designed to grant coding agents—including Copilot Chat, Claude Code, and Cursor—direct access to VS Code's internal APIs and third-party extensions.[1] Once installed, the extension automatically becomes available to these agents, allowing them to execute JavaScript code snippets to perform code exploration and modification tasks after user approval.[1]
The extension exposes a single MCP tool called run_vscode_script, which agents use to run code snippets.[1] Code edits are processed through the language server rather than direct file operations, providing an additional layer of safety.[1] The underlying HTTP server binds exclusively to 127.0.0.1 and requires per-session bearer token authentication for access.[1] All code snippet executions must be approved by the user before running, with an option to suppress subsequent prompts.[1] Session tokens are stored locally in .vscode/implant/session.yml with restricted permissions (0600) and are generated automatically.[1]