MCP server Official

Windsurf MCP

Configure MCP servers for Windsurf's Cascade agent in mcp_config.json, with stdio, Streamable HTTP, SSE and admin allowlists.

Author
Windsurf (Cognition)
Works with
Windsurf
Documented
Oct 2, 2026

What Windsurf MCP is

Cascade natively integrates with MCP. Servers are added by editing mcp_config.json. The page applies to the legacy Cascade agent; the Devin Local agent uses Devin CLI config. Teams get registry and allowlist controls.

What it does

How Windsurf MCP plugs in: which agents run it and what it addsRUNS INYour agentWindsurfone host documentedMCP SERVER · OFFICIALWindsurf MCPConnect the agent to tools, data…4 install steps1 permission noteWHAT IT ADDSWhat it doesSupports stdio, Streamable HTTP a…Per-server disabledTools listCap of 100 total toolsAdmin MCP registry and regex allo…agent → extension → new capability · from the official repository or docs
Where Windsurf MCP runs and what it adds, from its documentation
  • Supports stdio, Streamable HTTP and SSE transports, with OAuth
  • Per-server disabledTools list
  • Cap of 100 total tools
  • Admin MCP registry and regex allowlist for Teams/Enterprise
  • Config interpolation and remote HTTP servers

When to use it

Good fit

  • Give Cascade tools such as GitHub or databases
  • Restrict MCP servers org-wide

Not for

  • Marketplace one-click install: not available for Cascade, only the Devin Local agent

How to install Windsurf MCP

You need: Windsurf / Devin Desktop

  1. Open the Cascade ... menu and click Open MCP config file
  2. Add an entry under mcpServers
  3. Save and toggle the server in the MCPs section
  4. Enterprise users must enable MCP in settings
Configuration example (from the official docs)
{
  "mcpServers": {
    "github": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/server-github"],
      "env": { "GITHUB_PERSONAL_ACCESS_TOKEN": "<YOUR_PERSONAL_ACCESS_TOKEN>" }
    }
  }
}

Permissions and security

What it can access

  • stdio servers run local commands

Review the source before granting an agent access to credentials or production systems. We document what the maintainers state; we do not audit code.

Limitations

  • 100 tool limit
  • Config applies to legacy Cascade agent only

Tools it extends

No user reviews yet

AI coding IDE, formerly Windsurf, now Devin Desktop: manage local and cloud coding agents inside a full IDE.

Free stops at: Light quota for agent usage, resets daily and weekly, Limited model availability

Listed Not yet reviewed

Verified windsurf.com (opens Devin Desktop (formerly Windsurf) website in a new tab)

Frequently asked questions

Where is Windsurf's mcp_config.json?

~/.config/devin/mcp_config.json on macOS/Linux (or $XDG_CONFIG_HOME/devin), %APPDATA%devinmcp_config.json on Windows. source

How many MCP tools can Windsurf Cascade use?

Up to 100 total at a time. source

Which transports does Windsurf MCP support?

stdio, Streamable HTTP and SSE, with OAuth. source

Does Cascade have an MCP marketplace?

No; marketplace and one-click install are only for the Devin Local agent. source

Related guides

Sources and gaps

Not stated by the maintainers: repo_url is placeholder: product is closed source; Public source repository (closed source or not verified).

More extensions to look at