{
  "entry": {
    "kind": "agent",
    "slug": "visual-studio",
    "name": "Visual Studio",
    "vendor": "Microsoft",
    "description": "Microsoft Visual Studio 2022 (17.14+) / 2026 with GitHub Copilot agent mode and MCP servers (Windows)",
    "website": "https://learn.microsoft.com/en-us/visualstudio/ide/mcp-servers",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [],
    "packaging": null,
    "category": "ide-native",
    "configFiles": [
      {
        "id": "visual-studio-installer",
        "description": "Visual Studio Installer vswhere.exe (presence only)",
        "scope": "global",
        "format": "binary",
        "paths": {
          "win32": "C:\\Program Files (x86)\\Microsoft Visual Studio\\Installer\\vswhere.exe"
        },
        "extractors": []
      },
      {
        "id": "visual-studio-user-mcp",
        "description": "Visual Studio user MCP servers (all solutions)",
        "scope": "global",
        "format": "json",
        "paths": {
          "win32": "${USERPROFILE}\\.mcp.json"
        },
        "extractors": [
          {
            "type": "mcp-servers",
            "path": "servers",
            "format": "object"
          },
          "env-vars"
        ]
      },
      {
        "id": "visual-studio-solution-mcp",
        "description": "Visual Studio per-user solution MCP servers (.vs)",
        "scope": "project",
        "format": "json",
        "paths": {
          "win32": "${PROJECT}\\.vs\\mcp.json"
        },
        "extractors": [
          {
            "type": "mcp-servers",
            "path": "servers",
            "format": "object"
          },
          "env-vars"
        ]
      }
    ],
    "updatedAt": "2026-11-01T06:35:35.322Z",
    "risk": {
      "score": 10,
      "band": "low",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "knownVulns": [
      {
        "slug": "cve-2026-103572",
        "id": "CVE-2026-103572",
        "title": "Microsoft October Patch Tuesday: A Trailing Dot Let Copilot in Visual Studio and SSMS Rewrite Its Own MCP Config (CVE-2026-103572, CVSS 8.8), Plus Two VS Code Copilot and MCP Sandbox Bypasses",
        "severity": "high",
        "cvss": 8.8,
        "publishedAt": "2026-10-13"
      }
    ]
  }
}