Add docs for NuGet MCP server (#3495)

Author: jeffkl

docs/TOC.md

@@ -79,6 +79,7 @@
 ## [MSBuild .props and .targets](concepts/MSBuild-props-and-targets.md)
 ## [Troubleshooting Installed Packages](concepts/troubleshooting-installed-packages.md)
 ## [MCP servers in NuGet packages](concepts/nuget-mcp.md)
+## [Configuring the NuGet MCP Server](concepts/NuGet-MCP-Server.md)
 # Reference
 ## [.nuspec](reference/nuspec.md)
 ## [nuget.config file](reference/nuget-config-file.md)

docs/concepts/Auditing-Packages.md

@@ -202,6 +202,10 @@ If a known vulnerability exists in a top-level package's transitive dependencies
 - [Suppress the advisory](#excluding-advisories) until it can be addressed.
 - File an issue in the top-level package's tracker to request an update.
 
+### Use Copilot to update packages
+NuGet has released a Model Context Protocol (MCP) server that has the ability to update packages in your project to versions that resolve known vulnerabilities.
+See [Fixing package vulnerabilities](NuGet-MCP-Server.md#fixing-package-vulnerabilities) for more information.
+
 ### Security vulnerabilities found with no updates
 
 In the case that a known vulnerability exists in a package without a security fix, you can do the following.

docs/concepts/NuGet-MCP-Server.md

@@ -0,0 +1,104 @@
+---
+title: Using the NuGet Model Context Protocol (MCP) Server
+description: How to configure and use the NuGet Model Context Protocol (MCP) server.
+author: jeffkl
+ms.author: jeffkl
+ms.topic: conceptual
+ms.date: 10/01/2025
+---
+
+# Using the NuGet Model Context Protocol (MCP) Server
+
+## Requirements
+
+To run the MCP server, you must have **[.NET 10 SDK or later](https://dotnet.microsoft.com/en-us/download/dotnet/10.0)** installed.
+This version of .NET adds a command, `dnx`, which is used to download, install, and run the MCP server from [nuget.org](https://nuget.org).
+
+To verify your .NET version, run the following command in your terminal:
+```bash
+dotnet --info
+```
+
+## Getting started in Visual Studio 2026
+
+In Visual Studio 2026, the NuGet MCP server is built-in but must be enabled once in order to use its functionality.
+
+To enable the NuGet MCP server, follow these steps:
+1. Open Visual Studio 2026.
+1. Open the GitHub Copilot Chat window and make sure you are signed in.
+1. Click the tools icon in the bottom toolbar to bring up the Tools menu.
+1. Find the MCP server named "nuget" and check the box to enable it.
+
+![GitHub Copilot Chat Tools window in Visual Studio 2026](./media/copilot-tools-menu.png)
+
+## Getting started in Visual Studio 2022
+
+> [!NOTE]
+> You must have Visual Studio 2022 17.14 or later in order to configure an MCP server.
+
+In Visual Studio 2022, you must manually add the NuGet MCP server to your configuration.
+There are several configuration files that Visual Studio 2022 uses to define MCP servers.
+See [Use MCP Servers](/visualstudio/ide/mcp-servers) for more information on which file to configure.
+
+Once you have identified the correct configuration file, add the following JSON snippet to your `mcp.json`:
+```json
+{
+  "servers": {
+    "nuget": {
+      "type": "stdio",
+      "command": "dnx",
+      "args": [ "NuGet.Mcp.Server", "--source", "https://api.nuget.org/v3/index.json", "--yes" ]
+    }
+  }
+}
+```
+
+This will configure Visual Studio 2022 to use the latest version of the NuGet MCP server from nuget.org.
+To verify that the MCP server is working correctly, open the GitHub Copilot Chat window and make sure you are signed in.
+Then click the Tools icon in the bottom toolbar to bring up the Tools menu.
+You should see the MCP server named "nuget" in the list of available servers.
+
+![GitHub Copilot Chat Tools window in Visual Studio 2022](./media/copilot-tools-menu-2022.png)
+
+## Getting started in VS Code
+
+To configure the NuGet MCP server in VS Code click the appropriate button below and it will be set up.
+
+[![Install in VS Code](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=flat-square&logo=visualstudiocode&logoColor=white)](
+https://vscode.dev/redirect/mcp/install?name=NuGet&config=%7B%22name%22%3A%22NuGet.Mcp.Server%22%2C%22command%22%3A%22dnx%22%2C%22args%22%3A%5B%22NuGet.Mcp.Server%22%2C%22https%3A%2F%2Fapi.nuget.org%2Fv3%2Findex.json%22%2Cnull%2Cnull%5D%7D) [![Install in VS Code Insiders](https://img.shields.io/badge/VS_Code_Insiders-Install_Server-24bfa5?style=flat-square&logo=visualstudiocode&logoColor=white)](https://vscode.dev/redirect/mcp/install?name=NuGet&config=%7B%22name%22%3A%22NuGet.Mcp.Server%22%2C%22command%22%3A%22dnx%22%2C%22args%22%3A%5B%22NuGet.Mcp.Server%22%2C%22https%3A%2F%2Fapi.nuget.org%2Fv3%2Findex.json%22%2Cnull%2Cnull%5D%7D&quality=insiders)
+
+> ![GitHub Copilot Chat Tools window in VS Code](./media/copilot-tools-menu-vs-code.png)
+
+To verify that the MCP server is working correctly, open the GitHub Copilot Chat window and make sure you are signed in.
+Then click the Tools icon in the bottom toolbar to bring up the Tools menu.
+You should see the MCP server named "nuget" in the list of available servers.
+
+## Fixing package vulnerabilities
+
+The NuGet MCP server can help you identify and fix package vulnerabilities in your project.
+To use the MCP server to fix vulnerabilities, enter the following prompt in the GitHub Copilot Chat window:
+
+> Fix my package vulnerabilities
+
+The MCP server will analyze your project's dependencies and suggest updates to packages that have known vulnerabilities.
+
+## Updating all packages
+
+The NuGet MCP server can also update your packages to the latest compatible versions.
+To use the MCP server to update all packages, enter the following prompt in the GitHub Copilot Chat window:
+
+> Update all my packages to the latest compatible versions
+
+The MCP server will analyze your project's target framework(s) and suggest updates to the latest version of packages that are compatible with your project.
+
+## Update a package to a specific version
+
+The NuGet MCP server can update a specific package to a version you specify.
+To do so, enter the following prompt in the GitHub Copilot Chat window:
+
+> Update the package [PackageName] to version [VersionNumber]
+
+## Support
+
+If you experience an issue with the NuGet MCP server or have any other feedback, please open an issue on the [NuGet GitHub repository](https://github.com/NuGet/Home/issues/new?template=MCPSERVER.yml).
+Please provide the requested information in the issue template so that we can better understand and address your issue or suggestion.