Merge pull request #3502 from NuGet/main

Merge main into live

Author: jeffkl

docs/TOC.md

@@ -79,6 +79,7 @@
 ## [MSBuild .props and .targets](concepts/MSBuild-props-and-targets.md)
 ## [Troubleshooting Installed Packages](concepts/troubleshooting-installed-packages.md)
 ## [MCP servers in NuGet packages](concepts/nuget-mcp.md)
+## [Configuring the NuGet MCP Server](concepts/NuGet-MCP-Server.md)
 # Reference
 ## [.nuspec](reference/nuspec.md)
 ## [nuget.config file](reference/nuget-config-file.md)

docs/api/NuGet-Protocols.md

@@ -4,7 +4,7 @@ description: The evolving nuget.org protocols to interact with NuGet clients.
 author: anangaur
 ms.author: anangaur
 ms.date: 01/21/2021
-ms.topic: conceptual
+ms.topic: article
 ms.reviewer: kraigb
 ---
 

docs/api/implementation-guide.md

@@ -4,7 +4,7 @@ description: Guidelines and recommendations to anyone implementing the NuGet Ser
 author: zivkan
 ms.author: zivkan
 ms.date: 07/29/2023
-ms.topic: conceptual
+ms.topic: article
 ---
 
 # NuGet Server Implementation Guide
@@ -150,4 +150,4 @@ If you wish to host search, or indeed any other NuGet API resource, on different
 
 ## Enable embedded README downloads
 
-A [new resource](./readme-template-resource.md) was documented for constructing a URL that can be used to download a README for a given package. This will allow client, like the Package Management UI in VS, to display the embedded README for packages which haven't been previously installed by the user. The client will construct this URL and attempt to download the README, using the response to the request to determine if a README is available. This means servers should expect multiple requests to the constructed endpoint as users navigate the PM UI. 
+A [new resource](./readme-template-resource.md) was documented for constructing a URL that can be used to download a README for a given package. This will allow client, like the Package Management UI in VS, to display the embedded README for packages which haven't been previously installed by the user. The client will construct this URL and attempt to download the README, using the response to the request to determine if a README is available. This means servers should expect multiple requests to the constructed endpoint as users navigate the PM UI. 

docs/api/tools-json.md

@@ -4,7 +4,7 @@ description: The endpoint for
 author: jver
 ms.author: jver
 ms.date: 08/16/2018
-ms.topic: conceptual
+ms.topic: article
 ms.reviewer: kraigb
 ---
 

docs/archive/project-json-and-uwp.md

@@ -4,7 +4,7 @@ description: Description of how the project.json file is used to track NuGet dep
 author: JonDouglas
 ms.author: jodou
 ms.date: 07/17/2017
-ms.topic: conceptual
+ms.topic: article
 ---
 
 # project.json and UWP

docs/archive/project-json-impact.md

@@ -4,7 +4,7 @@ description: Details on how the implementation of project.json in NuGet 3.x affe
 author: JonDouglas
 ms.author: jodou
 ms.date: 01/18/2018
-ms.topic: conceptual
+ms.topic: concept-article
 ---
 
 # Impact of project.json when creating packages

docs/concepts/Auditing-Packages.md

@@ -3,7 +3,7 @@ title: Auditing package dependencies for security vulnerabilities
 description: How to audit package dependencies for security vulnerabilities and acting on security audit reports.
 author: JonDouglas
 ms.author: jodou
-ms.topic: conceptual
+ms.topic: how-to
 ms.date: 10/01/2025
 ---
 
@@ -202,6 +202,10 @@ If a known vulnerability exists in a top-level package's transitive dependencies
 - [Suppress the advisory](#excluding-advisories) until it can be addressed.
 - File an issue in the top-level package's tracker to request an update.
 
+### Use Copilot to update packages
+NuGet has released a Model Context Protocol (MCP) server that has the ability to update packages in your project to versions that resolve known vulnerabilities.
+See [Fixing package vulnerabilities](NuGet-MCP-Server.md#fixing-package-vulnerabilities) for more information.
+
 ### Security vulnerabilities found with no updates
 
 In the case that a known vulnerability exists in a package without a security fix, you can do the following.

docs/concepts/Dependency-Resolution.md

@@ -4,7 +4,7 @@ description: Details on the process through which a NuGet package's dependencies
 author: JonDouglas
 ms.author: jodou
 ms.date: 08/14/2017
-ms.topic: conceptual
+ms.topic: article
 ---
 
 # How NuGet resolves package dependencies

docs/concepts/MSBuild-props-and-targets.md

@@ -4,7 +4,7 @@ description: Describes MSBuild props and targets in NuGet packages
 author: nkolev92
 ms.author: nikolev
 ms.date: 07/13/2022
-ms.topic: conceptual
+ms.topic: article
 ---
 
 # MSBuild .props and .targets in a package

docs/concepts/NuGet-MCP-Server.md

@@ -0,0 +1,104 @@
+---
+title: Using the NuGet Model Context Protocol (MCP) Server
+description: How to configure and use the NuGet Model Context Protocol (MCP) server.
+author: jeffkl
+ms.author: jeffkl
+ms.topic: conceptual
+ms.date: 10/01/2025
+---
+
+# Using the NuGet Model Context Protocol (MCP) Server
+
+## Requirements
+
+To run the MCP server, you must have **[.NET 10 SDK or later](https://dotnet.microsoft.com/en-us/download/dotnet/10.0)** installed.
+This version of .NET adds a command, `dnx`, which is used to download, install, and run the MCP server from [nuget.org](https://nuget.org).
+
+To verify your .NET version, run the following command in your terminal:
+```bash
+dotnet --info
+```
+
+## Getting started in Visual Studio 2026
+
+In Visual Studio 2026, the NuGet MCP server is built-in but must be enabled once in order to use its functionality.
+
+To enable the NuGet MCP server, follow these steps:
+1. Open Visual Studio 2026.
+1. Open the GitHub Copilot Chat window and make sure you are signed in.
+1. Click the tools icon in the bottom toolbar to bring up the Tools menu.
+1. Find the MCP server named "nuget" and check the box to enable it.
+
+![GitHub Copilot Chat Tools window in Visual Studio 2026](./media/copilot-tools-menu.png)
+
+## Getting started in Visual Studio 2022
+
+> [!NOTE]
+> You must have Visual Studio 2022 17.14 or later in order to configure an MCP server.
+
+In Visual Studio 2022, you must manually add the NuGet MCP server to your configuration.
+There are several configuration files that Visual Studio 2022 uses to define MCP servers.
+See [Use MCP Servers](/visualstudio/ide/mcp-servers) for more information on which file to configure.
+
+Once you have identified the correct configuration file, add the following JSON snippet to your `mcp.json`:
+```json
+{
+  "servers": {
+    "nuget": {
+      "type": "stdio",
+      "command": "dnx",
+      "args": [ "NuGet.Mcp.Server", "--source", "https://api.nuget.org/v3/index.json", "--yes" ]
+    }
+  }
+}
+```
+
+This will configure Visual Studio 2022 to use the latest version of the NuGet MCP server from nuget.org.
+To verify that the MCP server is working correctly, open the GitHub Copilot Chat window and make sure you are signed in.
+Then click the Tools icon in the bottom toolbar to bring up the Tools menu.
+You should see the MCP server named "nuget" in the list of available servers.
+
+![GitHub Copilot Chat Tools window in Visual Studio 2022](./media/copilot-tools-menu-2022.png)
+
+## Getting started in VS Code
+
+To configure the NuGet MCP server in VS Code click the appropriate button below and it will be set up.
+
+[![Install in VS Code](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=flat-square&logo=visualstudiocode&logoColor=white)](
+https://vscode.dev/redirect/mcp/install?name=NuGet&config=%7B%22name%22%3A%22NuGet.Mcp.Server%22%2C%22command%22%3A%22dnx%22%2C%22args%22%3A%5B%22NuGet.Mcp.Server%22%2C%22https%3A%2F%2Fapi.nuget.org%2Fv3%2Findex.json%22%2Cnull%2Cnull%5D%7D) [![Install in VS Code Insiders](https://img.shields.io/badge/VS_Code_Insiders-Install_Server-24bfa5?style=flat-square&logo=visualstudiocode&logoColor=white)](https://vscode.dev/redirect/mcp/install?name=NuGet&config=%7B%22name%22%3A%22NuGet.Mcp.Server%22%2C%22command%22%3A%22dnx%22%2C%22args%22%3A%5B%22NuGet.Mcp.Server%22%2C%22https%3A%2F%2Fapi.nuget.org%2Fv3%2Findex.json%22%2Cnull%2Cnull%5D%7D&quality=insiders)
+
+> ![GitHub Copilot Chat Tools window in VS Code](./media/copilot-tools-menu-vs-code.png)
+
+To verify that the MCP server is working correctly, open the GitHub Copilot Chat window and make sure you are signed in.
+Then click the Tools icon in the bottom toolbar to bring up the Tools menu.
+You should see the MCP server named "nuget" in the list of available servers.
+
+## Fixing package vulnerabilities
+
+The NuGet MCP server can help you identify and fix package vulnerabilities in your project.
+To use the MCP server to fix vulnerabilities, enter the following prompt in the GitHub Copilot Chat window:
+
+> Fix my package vulnerabilities
+
+The MCP server will analyze your project's dependencies and suggest updates to packages that have known vulnerabilities.
+
+## Updating all packages
+
+The NuGet MCP server can also update your packages to the latest compatible versions.
+To use the MCP server to update all packages, enter the following prompt in the GitHub Copilot Chat window:
+
+> Update all my packages to the latest compatible versions
+
+The MCP server will analyze your project's target framework(s) and suggest updates to the latest version of packages that are compatible with your project.
+
+## Update a package to a specific version
+
+The NuGet MCP server can update a specific package to a version you specify.
+To do so, enter the following prompt in the GitHub Copilot Chat window:
+
+> Update the package [PackageName] to version [VersionNumber]
+
+## Support
+
+If you experience an issue with the NuGet MCP server or have any other feedback, please open an issue on the [NuGet GitHub repository](https://github.com/NuGet/Home/issues/new?template=MCPSERVER.yml).
+Please provide the requested information in the issue template so that we can better understand and address your issue or suggestion.