openapi security contract lint for Windsurf
io.github.jmshinhwa/openapi-security-contract-lint
Finds the lines in an OpenAPI file that publish an endpoint with no authentication, an API key in th
client:Windsurf
transport:stdio
runtime:npm
Install openapi security contract lint in Windsurf
~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json
{
"mcpServers": {
"openapi-security-contract-lint": {
"command": "npx",
"args": [
"-y",
"@readystack/openapi-security-contract-lint"
]
}
}
}
Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs