Argus by SoteroInc.

See and control what your AI agents and MCP tools can reach.

AI coding agents and MCP servers run with your credentials and your access. Argus puts a checkpoint in front of that: every agent gets a verified identity, every request is checked against policy you control, and every decision is recorded.

Argus runs inside VS Code, alongside the agents it governs.

What you can do

Register your agents. Give each agent or MCP tool a verified identity and a defined tool scope, so requests arrive attributable instead of anonymous.

Classify your data sources. Tag each source — database, file store, API — with a sensitivity tier: Public, Internal, Confidential, or Restricted.

Set policy. Decide which agents may reach which sources. Argus allows or blocks each request accordingly, before the agent's own code sees a result.

Watch it happen. The activity view shows every request in real time — which agent, which resource, allowed or blocked, and why. Each request expands into a step-by-step timeline of what was checked and how long it took.

Getting started

1. Install the extension.
2. Open Argus from the activity bar.
3. Sign in to your Sotero account when prompted — sign-in completes in your browser.
4. Connect the Argus runtime. If it isn't installed yet, the panel will link you to it.
5. Register an agent, add a data source, and set your first policy.

Requirements

• VS Code 1.95 or newer
• A Sotero account
• The Argus runtime installed on your machine — the extension will help you find or install it

Settings

Commands

Available from the Command Palette under Argus:

• Open Argus — open the dashboard
• Sign In / Sign Out
• Show Account — display the signed-in user
• Reset Runtime Connection — re-establish the link to the local runtime

Privacy and security

Sign-in happens in your system browser using PKCE. The extension never handles your password or your Google or Microsoft credentials.

Tokens are stored in VS Code SecretStorage, backed by your operating system's credential store — macOS Keychain, Windows Credential Manager, or libsecret on Linux. Policy decisions are made by the runtime on your own machine.

Support

• sotero.ai

© 2026 Sotero, Inc. All rights reserved. Licensed under a proprietary license; see the LICENSE file included with this extension.