IDE Integration Guide¶
The Escape MCP (Model Context Protocol) server can be integrated into various IDEs, including Visual Studio Code, Cursor, and other MCP-compatible editors. This guide demonstrates configuration for accessing Escape's capabilities directly within your development environment.
Prerequisites¶
- An active Escape account
- Visual Studio Code, Cursor, or another MCP-compatible IDE
- Internet connection to access the Escape MCP server
Step 1: Obtain Your API Key¶
API keys are used to authenticate your IDE with the Escape MCP server. Each key is scoped to your user account and provides access to your organizations and applications.
- Navigate to the Escape Dashboard
- Access your User Settings (profile menu in the top-right corner)
- Locate the API Key section
- Copy your API key

API Key Security
API keys provide full access to your Escape account through the Public API. Store your API key securely and never commit it to version control systems. Treat it with the same care as a password.
Step 2: Configure MCP Server in Your IDE¶
Visual Studio Code¶
Visual Studio Code provides native support for MCP servers through the MCP extension.
-
Create or edit
.vscode/mcp.jsonin your workspace root -
Add the Escape MCP server configuration:
-
Replace
your_api_key_herewith the API key obtained in Step 1 -
Save the file
Workspace vs Global Configuration
The .vscode/mcp.json file is workspace-specific. For global configuration across all projects, consult the VS Code MCP documentation.
Cursor¶
Cursor supports MCP servers through the same configuration format as Visual Studio Code:
- Create or edit
.vscode/mcp.jsonin your workspace root (Cursor uses the same configuration directory) - Add the Escape MCP server configuration (same as VS Code configuration above)
- Restart Cursor to load the new configuration
Other IDEs¶
Any IDE that supports the Model Context Protocol can connect to the Escape MCP server using the HTTP endpoint:
- Endpoint:
https://mcp.escape.tech/mcp - Authentication Header:
X-ESCAPE-API-KEY: your_api_key_here - Protocol: HTTP-based MCP
Consult your IDE's documentation for specific MCP server configuration instructions.
Step 3: Verify the Connection¶
After configuration, verification ensures the MCP server is accessible and operational within your IDE.
-
Restart your IDE or reload the window
- VS Code:
Ctrl+Shift+P→ "Developer: Reload Window" - Cursor:
Cmd+R(macOS) orCtrl+R(Windows/Linux)
- VS Code:
-
Open your AI assistant interface (Copilot, Claude, etc.)
-
Verify that Escape MCP tools are available in the tool list

Connection Verified
When properly configured, the Escape MCP server provides access to application management, scan operations, domain management, and security analysis capabilities directly within your IDE.
Vulnerability Remediation in Your IDE
Once configured, you can use the Escape MCP server as a powerful remediation tool directly in your IDE. Learn how to fix vulnerabilities without leaving your development environment in this blog article about fixing vulnerabilities with MCP.
Troubleshooting¶
MCP Server Not Appearing¶
- Verify the
mcp.jsonfile is in the correct location (.vscode/mcp.jsonat workspace root) - Confirm JSON syntax is valid (use a JSON validator)
- Ensure the API key is correct and has not been regenerated
- Restart the IDE after configuration changes
Authentication Errors¶
- Verify the API key is active in your Escape user settings
- Check that the header name is exactly
X-ESCAPE-API-KEY(case-sensitive) - Ensure the API key has not been revoked or regenerated
Connection Timeouts¶
- Confirm internet connectivity
- Verify your network allows HTTPS connections to
https://mcp.escape.tech - Check for proxy or firewall configurations that may block the connection
Security Best Practices¶
- Never commit API keys: Add
.vscode/mcp.jsonto your.gitignorefile - Use environment variables: Consider referencing environment variables in your MCP configuration if your IDE supports it
- Rotate keys regularly: Periodically regenerate API keys in your Escape user settings
- Scope access appropriately: API keys inherit your user permissions—ensure your account has only necessary access
Next Steps¶
- Explore Escape Copilot capabilities
- Review the Public API documentation
- Configure automated scanning workflows