Security Recipes for Windsurf
io.github.stevologic/security-recipes
Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.
client:Windsurf
transport:streamable-http
tools:75
Install Security Recipes in Windsurf
~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json
{
"mcpServers": {
"security-recipes": {
"serverUrl": "https://security-recipes.ai/mcp"
}
}
}Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs
What Windsurf can do once it is connected
- recipes_server_info
- recipes_mcp_upstream_servers
- recipes_mcp_servers_list
- recipes_mcp_server_get
- recipes_mcp_upstream_tools
- recipes_mcp_upstream_call
- recipes_mcp_upstream_context
- recipes_refresh
- recipes_search
- recipes_list
- recipes_get
- recipes_playbooks_list
- recipes_playbook_get
- recipes_playbook_plan
- recipes_cve_catalog_info
- recipes_cve_search
- recipes_cve_get
- recipes_quality_report
- recipes_workflow_control_plane
- recipes_mcp_gateway_policy
- recipes_agentic_assurance_pack
- recipes_agent_identity_ledger
- recipes_agentic_entitlement_review_pack
- recipes_agentic_approval_receipt_pack