Install on Windsurf

Windsurf uses a global MCP config that applies to all your projects. Edit one file and restart.

PrerequisiteNode.js 18 or later — verify with node --version
1

Open Windsurf Settings → Cascade → MCP Servers

Click the gear icon at the bottom-left, or go to Windsurf → Settings. In the Settings panel, find the Cascade section. You'll see MCP Servers with an Open MCP Registry button.

Windsurf Settings showing Cascade section with arrow pointing to Open MCP Registry button
2

Open the MCP Registry

Click Open MCP Registry. Veilguard isn't in the registry yet — you'll need to add it manually via the config file in the next step.

Windsurf MCP Registry with No Registry Servers Installed and arrow pointing to settings gear icon
3

Edit ~/.windsurf/mcp_config.json

Open your terminal and run:

open ~/.windsurf/mcp_config.json

If the file doesn't exist yet, create it. Paste the following config into it (or add the veilguard block inside an existing mcpServers object):

{
  "mcpServers": {
    "veilguard": {
      "command": "npx",
      "args": ["-y", "--package=veilguard", "veilguard-mcp"],
      "env": {
        "VEILGUARD_KEY": ""
      }
    }
  }
}
The mcp_config.json file open in Windsurf with the veilguard config pasted in and Configuring MCP side panel visible
4

Restart Windsurf and verify

Save the file and close and reopen Windsurf completely. Then go back to Settings → Open MCP Registry. Under the Installed tab, you should see veilguard with 14 / 14 tools and an Enabled badge.

Windsurf MCP Registry Installed tab showing veilguard with 14/14 tools and Enabled badge
Windsurf MCP Registry Installed tab showing veilguard with 14/14 tools and Enabled badge, arrow pointing to it

You can also click the veilguard row to see all 14 tools listed and confirm they are enabled.

Windsurf veilguard MCP detail page showing all 14 tools enabled including scan_secrets, check_env, scan_webhooks
Pro

Add your Pro key (optional)

Re-open ~/.windsurf/mcp_config.json and paste your license key into the VEILGUARD_KEY field. Save and restart Windsurf.

The mcp_config.json with VEILGUARD_KEY field showing PASTE YOUR KEY HERE highlighted with an arrow

Get a Pro key at veilguard.dev/pro.

Notes

  • •~/.windsurf/mcp_config.json is global — applies to every project you open in Windsurf.
  • •A full IDE restart is required after any config change — a window reload is not enough.
  • •For auto-scanning, download the .windsurfrules file to your project root.
← CursorVS Code →