Julia Kasper is a Microsoft product manager working on Visual Studio Code and GitHub Copilot, where she helps shape how coding agents access tools, understand developer context, and interact securely with enterprise systems.
By 2025, Kasper was applying those foundations to protected remote MCP servers on the Azure API Management team. Microsoft credited her with an Azure Developer CLI template for deploying secured MCP infrastructure. At AI Engineer World’s Fair, she demonstrated how Microsoft Entra ID, OAuth consent, and an API gateway could preserve user identity while making protected tools available inside VS Code and GitHub Copilot.
Enterprise identity should govern agent access. Kasper favors established OAuth providers and API gateways over requiring MCP developers to build authorization servers themselves. Her critique of early MCP authorization requirements emphasizes retaining existing consent, permissions, and token-validation controls.
Existing APIs can become governed agent tools. Her Microsoft demonstration of API-backed MCP tools shows how organizations can expose established REST services to agents while preserving enterprise security infrastructure.
Coding-agent quality depends on the harness. In a co-authored analysis of GitHub Copilot’s coding harness, Kasper describes how workspace context, tool execution, and the agent loop determine whether model capability translates into useful work. Her work on VSC-Bench extends that concern to evaluations grounded in actual editing, terminal, and tool-use workflows.
Follow a protected MCP request from its first HTTP challenge through OAuth discovery, C# token validation, Azure deployment, and authenticated tool use in VS Code.
