ZeroS360 MCP Tool Installer - VS Code Extension

This is an INSTALLER extension that automatically downloads, installs, and configures the ZeroS360 MCP tool in your VS Code environment.

What This Installer Extension Does

This extension is NOT the security tool itself - it's an automated installer that:

1. Downloads the ZeroS360 MCP tool binaries
2. Installs the tool globally on your system
3. Configures VS Code to recognize the MCP server
4. Activates the security validation functionality

Once installed, the ZeroS360 MCP tool provides:

• Azure S360 compliance checks
• Mandatory security validation for all AI-suggested code changes
• Real-time validation when using GitHub Copilot or other AI agents
• Automated security checks before code modifications are applied
• Manual validation via #mandatory-zeros360-validation hashtag or Command Palette
• Azure CLI authentication for secure S360 validation

Installer vs. Tool Relationship

Important Understanding:

• This Extension = Installer that downloads and configures the ZeroS360 tool
• ZeroS360 MCP Tool = The actual security validation server
• Installation Process = This extension → Downloads → Installs → Configures → Activates the tool
• End Result = ZeroS360 MCP server "MANDATORY-ZeroS360-Validation" running and protecting your workspace

How to Install the ZeroS360 MCP Tool

Step 1: Install This Installer Extension

1. Install this ZeroS360 MCP Tool Installer Extension in VS Code
2. This installer extension will automatically download and install the MCP tool
3. The extension will begin the installation process automatically

Step 2: Activate Installation Process (If Needed)

If the automatic installation doesn't start:

1. Restart VS Code to trigger the installation process
2. Look for installation notifications in the bottom-right corner

Step 3: Verification

After the installer extension completes the installation:

• You'll see: "MANDATORY-ZeroS360-Validation installed successfully!"
• The ZeroS360 MCP tool is now active and ready for use
• The security validation tool is immediately available
• If not auto-invoked for Copilot changes, check MCP - List Servers and START Server if stopped

How It Works

Automatic Security Validation

Once installed, the ZeroS360 tool automatically activates when you:

1. Open Agent Mode in VS Code (GitHub Copilot Chat)
2. Request code changes from AI assistants
3. Accept AI suggestions - the tool validates them first via Azure S360 WebApp

Manual Validation

You can also trigger validation manually:

1. Via Hashtag in Chat: Type #mandatory-zeros360-validation in GitHub Copilot Chat

   • If text is selected: Validates ONLY the selected lines
   • If no selection: Validates the entire file
   • No questions asked - immediate validation and results!

2. Via Command Palette:

   • Press Ctrl+Shift+P (or Cmd+Shift+P on Mac)
   • Search for "Validate File/Selection with ZeroS360"
   • Works on full files or selected code

3. Via Context Menu:

   • Right-click in the editor or on a file in Explorer
   • Select "Validate File/Selection with ZeroS360"

What Happens During Validation

• Security scan of proposed changes via Azure WebApp S360
• Compliance check against your organization's policies
• Azure CLI authentication for secure validation
• Warning alerts for potentially risky modifications
• Approval process for safe changes

Usage Examples

Using with GitHub Copilot

User: "Add a function to handle user authentication"
Copilot: [Suggests code changes]
ZeroS360: [Validates via Azure S360 WebApp]
Result: Safe changes applied | Warning: Security review needed

Manual Validation via Hashtag

User: #mandatory-zeros360-validation
      [Selected lines 10-25 of authentication.ts]
ZeroS360: [Validates ONLY the selected lines]
Result: Detailed S360 compliance report displayed

System Requirements

Core Requirements

• No external dependencies! The MCP tool is a self-contained .NET executable
• Works on: Windows (x64), macOS (Intel/ARM), Linux (x64)

Optional (Recommended)

• Azure CLI - Required for S360 validation features
  • Download: https://docs.microsoft.com/en-us/cli/azure/install-azure-cli
  • Used for Azure authentication and compliance checks

Troubleshooting

Installation Issues

❌ "MCP server not activated"

• Restart VS Code to refresh MCP configuration
• Check: Open Command Palette → "MCP: List Servers" → Find "MANDATORY-ZeroS360-Validation" → Click START if stopped
• Check: View "Show Logs" for activation errors

Issue: "Azure CLI not detected" warning

• Impact: S360 validation features won't work without Azure CLI
• Solution: Install Azure CLI from https://docs.microsoft.com/en-us/cli/azure/install-azure-cli
• Alternative: Tool will run, but validation will be limited

Issue: MCP server shows STOPPED status

• Solution:
  1. Open Command Palette → MCP: List Servers
  2. Find MANDATORY-ZeroS360-validationTool
  3. Click START Server
• Prevention: Server should auto-start on activation; check logs if it doesn't

Issue: Permission denied on Linux/macOS

• Cause: Executable permissions not set
• Solution: Run chmod +x ~/.local/share/MCP/GatekeeperTools-CSharp/mcp-gatekeeper-tools
• Note: Installer should set this automatically; report if it doesn't

Issue: TypeScript version conflicts

• Automatic: Installer detects and removes old npm install -g mcp-gatekeeper-tools
• Manual cleanup (if needed):

  npm uninstall -g mcp-gatekeeper-tools
  npm uninstall -g @zeros360/mcp-gatekeeper-tools
  

Viewing Diagnostic Information

Use MCP Gatekeeper: Check Status to view:

• Installation path and file existence
• Installed version vs. bundled version

"Azure CLI authentication failed"

• Run az login --scope api://b9705a6d-b6b8-469f-9e28-84c4d0d81300/.default in terminal
• Verify Azure CLI is installed: az --version
• Required for S360 validation features

"Installation failed" or "Server won't start"

• Check installation logs: Command Palette → "Show Logs"
• Try reinstalling: Command Palette → "MCP Gatekeeper: Install"
• Ensure no antivirus blocking the executable

Commands

Access via Command Palette (Ctrl+Shift+P or Cmd+Shift+P):

Version: 2.0.0
Publisher: DisCo-PacketCore

MANDATORY VALIDATION: This tool enforces security validation for all AI-assisted code changes via Azure S360 WebApp. Changes must pass compliance checks before implementation.