Cup'n'String
Join Waitlist

© 2026 Cup'n'String

Security Configuration Manuals

Integration Guides

Step-by-step policy and containment profiles. Learn how to configure workstation security, firewall routing, and credential shielding for your development toolchain.

VS
Native Integration

VS Code

VS Code is one of the most common surfaces for AI-assisted development. Cup’n’String helps govern VS Code itself, agent extensions, local terminals, MCP servers, provider endpoints, and access to local services.

Network MCP Secrets Local Services Audit
Complexity: Low View Guide
CU
Native Integration

Cursor

Cursor is an AI-native editor with high agentic activity. Cup’n’String applies IDE-aware policy, endpoint governance, secret shielding, and local-service controls.

Network Secrets Audit
Complexity: Low View Guide
JE
Native Integration

JetBrains IDEs

JetBrains IDEs are common in enterprise engineering teams. Cup’n’String covers IntelliJ IDEA, PyCharm, WebStorm, GoLand, PhpStorm, Rider, CLion, RubyMine, DataGrip, and Android Studio-family workflows.

Network Secrets Audit
Complexity: Medium View Guide
VI
Native Integration

Visual Studio

Visual Studio is critical for .NET and Windows enterprise development. Copilot Agent Mode can edit files, run commands, and use build context, so policy attribution and command/network visibility matter.

Network Secrets Audit
Complexity: Medium View Guide
GI
Native Policy Profile

GitHub Copilot

GitHub Copilot is a broad enterprise AI coding surface across VS Code, Visual Studio, JetBrains IDEs, Xcode, Eclipse, Vim/Neovim, and Azure Data Studio. Cup’n’String provides governance around network egress, policy attribution, and local secret exposure.

Network Secrets Audit
Complexity: Low View Guide
CL
Active Proxy & Shielding

Claude Desktop

Claude Desktop commonly connects to local MCP servers. Cup’n’String can govern MCP server registration, tool calls, local file access, command execution paths, and credential exposure.

Network MCP Secrets Audit
Complexity: Medium View Guide
CL
Active Proxy & Shielding

Claude Code

Claude Code is a terminal-first coding agent that can read files, edit repositories, and execute commands. Cup’n’String treats it as a high-value governance target.

Network Secrets Audit
Complexity: Medium View Guide
CL
Active Proxy & Shielding

Cline

Cline is a VS Code agent extension that can use tools, read files, run commands, and interact with MCP servers. Cup’n’String governs it as an active agent surface.

Network MCP Secrets Audit
Complexity: Low View Guide
RO
Active Proxy & Shielding

Roo Code

Roo Code is a VS Code agent extension that can use tools, read files, run commands, and interact with MCP servers. Cup’n’String governs it as an active agent surface.

Network MCP Secrets Audit
Complexity: Low View Guide
MO
Active Proxy & Shielding

Model Context Protocol (MCP)

MCP is a central protocol for connecting AI agents to tools, files, terminals, databases, and services. Cup’n’String provides managed MCP proxying, allowlists, audit logs, and policy controls.

Network MCP Secrets Audit
Complexity: Medium View Guide
OP
Compatibility Adapter

OpenCode

OpenCode is an open-source coding agent available as terminal, desktop, or IDE extension. Cup’n’String governs it through process detection, provider/API proxying, MCP controls, and local-service policy.

Network MCP Secrets Audit
Complexity: Medium View Guide
KI
Auto-Discovered

Kiro

Kiro is an AWS-backed agentic IDE/CLI built around spec-driven development. Cup’n’String provides process detection, provider/API governance, MCP-aware controls where available, and local workspace protection.

Network Secrets Audit
Complexity: Medium View Guide
DE
Auto-Discovered

Devin Desktop / Windsurf

Devin Desktop, formerly Windsurf, combines IDE workflows with agent command-center behavior. Cup’n’String supports detection, endpoint governance, local-service policy, and secret shielding.

Network Secrets Audit
Complexity: Medium View Guide
ZE
Auto-Discovered

Zed

Zed is a fast editor with AI edit prediction and provider integrations. Cup’n’String provides detection, provider governance, local-service restrictions, and credential shielding.

Network Secrets Audit
Complexity: Low View Guide
XC
Auto-Discovered

Xcode

Xcode is the primary Apple-platform IDE. AI assistance commonly appears through Copilot for Xcode or external agents. Cup’n’String governs provider/API traffic, project secrets, signing materials, and local service access.

Network Secrets Audit
Complexity: Advanced View Guide
AN
Native Integration

Android Studio

Android Studio is JetBrains-based and increasingly uses Gemini assistance for Compose, Gradle, crashes, logs, and Android workflows. Cup’n’String governs provider traffic, project secrets, local services, emulators, and build tooling.

Network Secrets Audit
Complexity: Medium View Guide
CO
Compatibility Adapter

Continue.dev

Continue.dev is a common open-source assistant for VS Code and JetBrains, often used with BYO models and custom endpoints. Cup’n’String governs custom provider URLs, local model connections, MCP/tool activity, and secrets.

Network MCP Secrets Audit
Complexity: Low View Guide
AI
Process & Network Governance

Aider

Aider is a terminal coding agent. Cup’n’String governs it through process detection, provider/API proxying, local service controls, and secret shielding.

Network Secrets Audit
Complexity: Low View Guide
LO
Auto-Discovered

Local Model Servers

Local model servers such as Ollama, LM Studio, llama.cpp-compatible servers, and OpenAI-compatible local endpoints are common in privacy-sensitive teams. Cup’n’String discovers local ports, attributes access, and governs connections.

Network Secrets Audit
Complexity: Low View Guide
OP
Compatibility Adapter

OpenAI-compatible API Gateways

OpenAI-compatible API Gateways are governed by routing traffic through a managed proxy to attribute outbound activity, apply policy, and shield API keys.

Network Secrets Audit
Complexity: Low View Guide
AN
Compatibility Adapter

Anthropic-compatible API Gateways

Anthropic-compatible API Gateways are governed by routing traffic through a managed proxy to attribute activity, apply outbound policy, and shield credentials.

Network Secrets Audit
Complexity: Low View Guide
GE
Compatibility Adapter

Gemini-compatible API Gateways

Gemini-compatible API Gateways are governed by routing traffic through a managed proxy to attribute activity, apply policy, and shield provider keys.

Network Secrets Audit
Complexity: Low View Guide
OP
Compatibility Adapter

OpenRouter-compatible Gateways

OpenRouter-compatible aggregator traffic is governed by routing it through a managed proxy to attribute outbound activity across providers and shield keys.

Network Secrets Audit
Complexity: Low View Guide

Need a specialized environment template?

We offer customized enterprise policy configurations for private model routers, regional networks, and proprietary developer systems.

Contact Enterprise Support