mcp server security scanner for Windsurf
io.github.vpatser1/mcp-server-security-scanner
Scan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs
client:Windsurf
transport:stdio
runtime:npm
Install mcp server security scanner in Windsurf
~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json
{
"mcpServers": {
"mcp-server-security-scanner": {
"command": "npx",
"args": [
"-y",
"mcp-server-security-scanner"
],
"env": {
"LICENSE_KEY": "<LICENSE_KEY>"
}
}
}
}
Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs