Implant extends VS Code by exposing its APIs to coding agents such as Copilot Chat and others that use MCP. The extension injects a single MCP tool, run_vscode_script, that executes JavaScript snippets inside the running VS Code extension host with full access to the vscode.* API.

The agent first installs Implant into the workspace, creating portable rule files that teach it when to call the tool. When invoked, a webview opens beside the editor, showing the snippet with syntax highlighting. The user can Run, Run + trust session, or Deny the script. Settings like implant.requireConfirmation, implant.timeout, and implant.port control approval and execution limits.

Safety hinges on the approval webview and a per‑session bearer token stored in .vscode/implant/session.yml. The HTTP server binds only to 127.0.0.1 and rejects unauthorized requests. Though there is no sandbox, the user sees each snippet before it runs, ensuring secure operation.

Overall, Implant gives agents live access to VS Code features—Find References, Go‑to Definition, diagnostics, git blame, and language‑server edits—while keeping control in the developer’s hands.