a2a auditor for Windsurf
io.github.guardbee/a2a-auditor
Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
client:Windsurf
transport:stdio
runtime:npm
Install a2a auditor in Windsurf
~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json
{
"mcpServers": {
"a2a-auditor": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-a2a-auditor"
]
}
}
}
Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs