MCP stdio ShellGuard for Windsurf
io.studiomeyer/stdio-shellguard
Defense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking.
client:Windsurf
transport:stdio
runtime:npm
Install MCP stdio ShellGuard in Windsurf
~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json
{
"mcpServers": {
"stdio-shellguard": {
"command": "npx",
"args": [
"-y",
"mcp-stdio-shellguard"
]
}
}
}Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs