CodingDocumented overviewLast checked Oct 1, 2026
On-device control plane for AI coding agents: measures token cost, blocks secret leaks and keeps shared memory, with signed receipts.
(open full size in a new tab)
(open full size in a new tab)
(open full size in a new tab)
(open full size in a new tab)
(open full size in a new tab)Our take: Install Surfil on a Mac or Linux dev machine if you want measured per-request token costs and secret-leak blocking for Claude Code, Cursor or Codex without your source code leaving the device.
Main limitation: No free tier (Starter is $5/mo), it needs a Mac or Linux terminal, and Guard enforcement, Mind and Radar/Bench require Pro or higher.
Install Surfil on a Mac or Linux dev machine if you want measured per-request token costs and secret-leak blocking for Claude Code, Cursor or Codex without your source code leaving the device. Based on the vendor's documentation, not on a hands-on test.
Also a good fit for
Or if
Prices checked Oct 1, 2026 on the official US pricing page. Official pricing ↗ Prices and limits change often.
Vendor pricing page re-checked automatically 11 days ago: no changes detected.
No free tier.
14 days of Pro for $1, then $25 per month unless cancelled; one trial per account and the $1 is not refunded.
$5/mo source (opens in a new tab)
Month
Annual billing is 20% off: Starter $48 per year
For: Individuals who want visibility only
Limits
Includes
$25/mo source (opens in a new tab)
Month
Annual billing is 20% off: Pro $240 per year; $25 per month from day 15 of the trial
For: Individual developers (recommended default)
Limits
Includes
$20/mo per seat per month source (opens in a new tab)
Month
$16 per seat per month on annual billing; Team set up with sales
For: Engineering teams sharing credits and memory
Limits
Includes
Custom pricing source (opens in a new tab)
Custom
For: Organizations needing SSO and policy controls
Limits
Includes
Agent execution is unmetered; each server-signed output (receipt, benchmark, attestation) costs one Credit, and top-ups are available.
Not stated.
Surfil is a locally installed control plane that sits between AI coding agents such as Claude Code, Cursor, Codex, Copilot and MCP-based agents and their model providers. A one-command install on Mac or Linux routes agent requests through an on-device pipeline covering security, cost, quality, observability and memory, and consolidates scattered MCP server configs into one endpoint. Its modules include Cap (per-request cost ledger from provider token counts), Guard (blocking API keys, tokens or injected instructions before they leave the machine) and Mind (shared memory across agents with staleness flags). Savings and benchmarks are issued as Ed25519-signed receipts that can be verified offline. Agent traffic is unmetered; each signed output consumes one Credit.
You provide
You get back
Scenarios are worked out by our editors from the documentation; the actual result depends on your input and plan.
Installs with one command beside existing agents and restores configs byte-for-byte on uninstall Lets you try Surfil with no lasting changes
Records a request-by-request token cost ledger from provider token counts Shows what agents actually spend
Monitors or blocks API keys, tokens and injected tool calls before they leave the machine Prevents secrets leaking into model prompts
Keeps shared memory across agents with out-of-date flags, synced end-to-end encrypted Avoids re-explaining project context to each agent
Export: .surfilpkg
Surfil has no public API in its official documentation. Public edge API at api.surfil.com documented in the reference API documentation ↗
Summarized from the vendor's current policies; this is not legal advice and a vendor's badge is not an independent audit.
Source code stays on the device; telemetry is metadata only (counts, durations, model names, token totals).
Not stated beyond that prompts and source content are not collected.
Operational metadata kept for billing and audit; ciphertext memory kept until you delete it or close the account, then purged.
None stated.
Policies: surfil.com/privacy
"Better suited" is based on documented features and pricing, not on a head-to-head test.
| Alternative | When to choose it | Pricing | Limitation | |
|---|---|---|---|---|
| Cursor | — | — | Compare | |
| GitHub Copilot | — | — | Compare | |
| Claude | — | — | ||
| Devin Desktop (formerly Windsurf) | — | — | Compare |
No user reviews yet.
Used Surfil? Be the first to share your experience.
One server-signed value-output such as a savings receipt, benchmark result or attestation; agent execution itself is unmetered. source (opens in a new tab)
Execution keeps working, but new signed outputs wait until window or monthly credits refresh or you top up. source (opens in a new tab)
You get 14 days of Pro for $1 including 250 signed outputs, then $25 per month unless you cancel; one trial per account and the $1 is not refunded. source (opens in a new tab)
No. The privacy policy says source code never leaves your device; the edge only authenticates, meters and signs, and telemetry is metadata only. source (opens in a new tab)
No. Weave, receipts and memory survive a downgrade; paid features just stop producing new signed outputs. source (opens in a new tab)
Not verified: Windows support; Training-use statement beyond metadata-only telemetry; Credit amounts per plan; Privacy page says it is illustrative, not final legal wording.
Every fact about Surfil above comes from the 4 official pages listed here, last compared on Oct 1, 2026; we have not run Surfil ourselves, so it has no editorial score. How we check and re-check pages.
Article updated Oct 10, 2026; prices checked Oct 1, 2026. Outbound links to vendors are plain links; we do not earn commissions. How we review · Report an error
compare>