You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: mcp/README.md
+15-13Lines changed: 15 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,14 +2,15 @@
2
2
3
3
# NuGet MCP Server
4
4
5
-
Contains an[Model Context Protocol](https://modelcontextprotocol.io/introduction) (MCP) server for NuGet, enabling advanced tooling and automation scenarios for NuGet package management.
5
+
Contains a[Model Context Protocol](https://modelcontextprotocol.io/introduction) (MCP) server for NuGet, enabling advanced tooling and automation scenarios for NuGet package management.
6
6
See the [official NuGet MCP documentation](https://learn.microsoft.com/nuget/concepts/nuget-mcp-server) for the latest information.
7
7
8
8
## Capabilities
9
9
10
-
- Uses your configured NuGet feeds to get real time information about packages.
11
-
- Provides the ability to update packages with known vulnerabilities, including transitive dependencies.
12
-
- Provides advanced tooling for updating packages which provides the best updates based on a projects unique package graph and target frameworks.
10
+
- Uses your configured NuGet feeds to get real-time information about packages.
11
+
- Provides conservative remediation planning for packages with known vulnerabilities, including transitive dependencies.
12
+
- Provides package upgrade planning based on a project's package graph and target frameworks.
13
+
- Reviews your repository's NuGet supply-chain posture (Central Package Management, NuGet Audit, Package Source Mapping, and `NuGet.Config` validity) and recommends hardening steps.
13
14
14
15
## Requirements
15
16
@@ -99,7 +100,7 @@ If you'd like to use a specific version of the MCP server, you can specify it wi
99
100
}
100
101
```
101
102
102
-
When configured this way, you will need to update the version as new release become available.
103
+
When configured this way, you will need to update the version as new releases become available.
103
104
104
105
See [File locations for automatic discovery of MCP configuration](https://learn.microsoft.com/visualstudio/ide/mcp-servers?view=vs-2022#file-locations-for-automatic-discovery-of-mcp-configuration) for more information on the location of the appropriate `mcp.json` for you.
105
106
@@ -139,7 +140,7 @@ If you'd like to use a specific version of the MCP server, you can specify it wi
139
140
}
140
141
```
141
142
142
-
When configured this way, you will need to update the version as new release become available.
143
+
When configured this way, you will need to update the version as new releases become available.
143
144
144
145
See [MCP configuration in VS Code](https://code.visualstudio.com/docs/copilot/chat/mcp-servers#_add-an-mcp-server) for more information on the location of the appropriate `mcp.json` for you.
145
146
@@ -208,11 +209,12 @@ jobs:
208
209
```
209
210
210
211
## Currently Supported Tools
211
-
- `get-nuget-solver`: Fix all your package vulnerable version by updating your packages (direct and transitive) to the best compatible non-vulnerable version.
212
-
- `get-nuget-solver-latest-versions`: Fix all your package vulnerable version by updating your packages (direct and transitive) to the latest compatible non-vulnerable version.
213
-
- `get-latest-package-version`: Gets the latest version of a NuGet package.
214
-
- `get-package-readme`: Gets the README for a NuGet package and returns it as markdown.
215
-
- `update-package`: Updates installed packages to the specified version if compatible with the project configuration. It will also install/update packages needed to complete the operation.
212
+
- `fix_vulnerable_packages`: Fixes known security vulnerabilities in NuGet dependencies by computing the smallest safe version changes.
213
+
- `upgrade_packages_to_latest`: Upgrades NuGet packages to the latest compatible versions available from configured package sources.
214
+
- `get_latest_package_version`: Returns the latest version of a NuGet package.
215
+
- `get_package_context`: Returns the `AGENTS.md` context for a NuGet package when available; otherwise returns the package README.
216
+
- `update_package_version`: Updates one or more NuGet packages to exact target versions while keeping the dependency graph compatible.
217
+
- `review_supply_chain_security`: Reviews and recommends hardening steps for your repository's NuGet supply‑chain posture (eg, Central Package Management, NuGet Audit, Package Source Mapping, and NuGet.Config validation).
216
218
217
219
## Data Collection
218
220
The software may collect information about you and your use of the software and send it to Microsoft. Microsoft may use this information to provide services and improve our products and services. You may turn off the telemetry as described in the repository. There are also some features in the software that may enable you and Microsoft to collect data from users of your applications. If you use these features, you must comply with applicable law, including providing appropriate notices to users of your applications together with a copy of Microsoft's [privacy statement](https://www.microsoft.com/privacy/privacystatement). You can learn more about data collection and use in the help documentation and our privacy statement. Your use of the software operates as your consent to these practices.
@@ -221,7 +223,7 @@ The software may collect information about you and your use of the software and
221
223
Telemetry collection is on by default to help improve the product. This can be disabled, see [Disabling All Telemetry](#disabling-telemetry-only) section below for more details.
222
224
223
225
#### Disabling Telemetry Only
224
-
To disable Microsoft telemetry collection, set the environment variable `DOTNET_CLI_TELEMETRY_OPTOUT` to `false` or `1`:
226
+
To disable Microsoft telemetry collection, set the environment variable `DOTNET_CLI_TELEMETRY_OPTOUT` to `true` or `1`:
225
227
226
228
```bash
227
229
export DOTNET_CLI_TELEMETRY_OPTOUT=true
@@ -232,4 +234,4 @@ If you experience an issue with the NuGet MCP server or have any other feedback,
232
234
Please provide the requested information in the issue template so that we can better understand and address your issue or suggestion.
233
235
234
236
### No Warranty / Limitation of Liability
235
-
This software is provided "as is" without warranties or conditions of any kind, either express or implied. Microsoft shall not be liable for any damages arising from use, misuse, or misconfiguration of this software.
237
+
This software is provided "as is" without warranties or conditions of any kind, either express or implied. Microsoft shall not be liable for any damages arising from use, misuse, or misconfiguration of this software.
0 commit comments