Agents
Envlet for GitHub Copilot
Copilot agent mode in VS Code reads MCP servers from .vscode/mcp.json. Commit that file and every teammate's Copilot gets the same tools.
Install
{
"servers": {
"envlet": {
"command": "npx",
"args": ["-y", "@envlet/cli", "mcp"]
}
}
}Run with its own identity
envlet run -- code .Say the word
Move us to Envlet.Set up
- 01
Add the MCP server
Add the entry to .vscode/mcp.json in the repository.
- 02
Give it an identity
Create an agent identity for GitHub Copilot in the dashboard or let the migrate prompt do it. Its token opens one environment, and production starts fully withheld.
- 03
Run it through Envlet
Start GitHub Copilot with envlet run. It sees the values for its identity and nothing else, and every read shows up under its name.
Questions
- Can GitHub Copilot read production secrets?
- Not by default. A new agent grant withholds every current and future production variable. You allow specific names when you decide to.
- Do agent identities count toward my plan?
- No. Agents and CI identities are unlimited on every plan. Only humans are members.