IA-QA Security — 30 tools for Windsurf
io.github.jcjamet/ia-qa-security
Agent security: prompt injection, PII & secret scans, TLS/header/CORS audits, MCP checks. Free.
client:Windsurf
transport:streamable-http
tools:30
Install IA-QA Security — 30 tools in Windsurf
~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json
{
"mcpServers": {
"ia-qa-security": {
"serverUrl": "https://www.ia-qa.com/mcp/security"
}
}
}Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs
What Windsurf can do once it is connected
- find_tool
- prompt_injection_scan
- guardrail_test
- redact_pii
- secret_scan
- validate_agent_trajectory
- validate_mcp_response
- mcp_server_health_check
- mcp_server_evaluate
- toxicity_scan
- function_call_validate
- mcp_schema_lint
- bias_detect
- shield_analyze
- security_headers_check
- ssl_certificate_check
- cors_test
- cors_checker
- cookie_security_audit
- web_security_audit
- rate_tool
- decode_jwt
- validate_url
- http_status_lookup