Windsurf Integration
Integrate AIVory Guard with Windsurf, Codeium’s AI-first editor featuring Cascade and Flow technology for intelligent code generation with built-in compliance scanning.
- Native MCP Support - Windsurf has built-in Model Context Protocol integration
- Cascade & Flow - Works seamlessly with Windsurf’s AI workflow technologies
- Zero Dependencies - Run via npx without permanent installation
- Free Tier Available - Start scanning without an API key
Note
Windsurf is one of the few editors with native MCP support, making AIVory Guard integration particularly seamless.
Prerequisites
Windsurf Editor
Download and install from codeium.com/windsurf
API Key (Optional)
Get your key from app.aivory.net/tokens for premium features
Configuration
Create or edit the MCP configuration file at ~/.codeium/windsurf/mcp_config.json:
Premium Configuration
{
"mcpServers": {
"aivory": {
"command": "npx",
"args": ["--yes", "@aivorynet/guard"],
"env": {
"AIVORY_API_KEY": "your_api_key_here"
}
}
}
}
Success
Premium features include AI detection, expanded scan limits, and access to all 17+ compliance standards.
Free Tier Configuration
{
"mcpServers": {
"aivory": {
"command": "npx",
"args": ["--yes", "@aivorynet/guard"]
}
}
}
Note
The free tier includes 5 scans per week with core compliance standards. No API key required.
Usage
After adding the configuration, restart Windsurf to activate the integration.
Scanning with Cascade
Use natural language in Cascade or Chat to invoke AIVory Guard:
Security Scan
“Scan this authentication module with AIVory for OWASP compliance”
Auto-Fix
“Review my API code with AIVory and fix any security violations”
GDPR Check
“Check this function with AIVory for GDPR compliance”
Note
Cascade understands context, so you can ask follow-up questions like “Fix all critical violations” after an initial scan.
Verification
Test Your Integration
Manual Server Test
npx --yes @aivorynet/guard test
In-Editor Verification
Open Windsurf Chat and ask:
Windsurf should confirm that AIVory tools are available and list the available scanning commands.
Troubleshooting
Configuration Not Loading
- Verify the file path:
~/.codeium/windsurf/mcp_config.json - Ensure valid JSON syntax (no trailing commas)
- Restart Windsurf completely after changes
Server Not Starting
- Check npm/npx is in your PATH
- Try running
npx --yes @aivorynet/guardmanually in terminal - Check for firewall or proxy restrictions
API Key Issues
- Verify your key at app.aivory.net/tokens
- Ensure no extra whitespace around the key in the config
- Check your subscription status in the dashboard
Advanced Configuration
Environment Variables
Customize AIVory Guard behavior with additional environment variables:
{
"mcpServers": {
"aivory": {
"command": "npx",
"args": ["--yes", "@aivorynet/guard"],
"env": {
"AIVORY_API_KEY": "your_api_key_here",
"AIVORY_ENABLED_STANDARDS": "OWASP_TOP_10,GDPR,SOC2",
"AIVORY_LOG_LEVEL": "debug"
}
}
}
}
| Variable | Description |
|---|---|
AIVORY_API_KEY |
Your AIVory API key for premium features |
AIVORY_ENABLED_STANDARDS |
Comma-separated list of standards to check |
AIVORY_LOG_LEVEL |
Logging verbosity (debug, info, warn, error) |