SHULIAK SIP-1 Zero-Egress AI & MCP Firewall for Windsurf
io.github.shuliak11/sip1-mcp-firewall
On-device NIST SP 800-38G FF1 (9/9 CAVP) pseudonymization, OWASP MCP05/06 guard & EU AI Act AIBOM.
client:Windsurf
transport:stdio
runtime:npm
Install SHULIAK SIP-1 Zero-Egress AI & MCP Firewall in Windsurf
~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json
{
"mcpServers": {
"sip1-mcp-firewall": {
"command": "npx",
"args": [
"-y",
"@shuliak-corp/sip1-mcp"
]
}
}
}Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs