NuGet MCP Server

The NuGet MCP server from Microsoft's NuGet team. It runs on your machine and uses your configured NuGet feeds for real-time package information, so your agent can fix vulnerable packages, upgrade dependencies and harden your repository's NuGet setup. What you can do with it - Fix known vulnerabilities in your NuGet dependencies, including transitive ones, with the smallest safe version changes - Upgrade packages to the latest versions compatible with your project's target frameworks - Update one or more packages to an exact version while keeping the dependency graph compatible - Look up a package's latest version, and read its AGENTS.md context or README - Review your NuGet supply-chain posture: Central Package Management, NuGet Audit, Package Source Mapping and NuGet.Config validity How it connects It needs the .NET 10 SDK or later, which adds the dnx command. Your agent starts it with dnx, which downloads the NuGet.Mcp.Server package from nuget.org and runs it; add @ and a version to the package name to pin one. It ships in-box with Visual Studio 2026, where you turn it on once in GitHub Copilot Chat's tools menu, and Microsoft documents setup for Visual Studio 2022 (17.14 or later), VS Code and the GitHub Copilot coding agent. Good to know - There's no sign-in: it works with the NuGet feeds you've already configured. - It sends usage telemetry to Microsoft by default; set DOTNET_CLI_TELEMETRY_OPTOUT to true to turn that off.