How to Use the 42Crunch MCP in Windsurf

Q: Why does 42Crunch fail to find my collections in Windsurf?

You need the exact Collection ID. Tell Cascade to run listcollections first so it can grab the right identifier for subsequent commands.

Windsurf Cascade runs your 42Crunch API security audits automatically.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect 42Crunch MCP to Windsurf

Create your Vinkius account to connect 42Crunch to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup 42Crunch with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Run full audit chains with Windsurf Cascade

The 42Crunch MCP server connects your API collections to Windsurf's autonomous agent. You tell Cascade to check a new endpoint, and it pulls the right collection using `list_collections` before tracking down the specific definition with `list_apis`. Cascade doesn't stop to ask for permission between steps. It grabs the OpenAPI file, pushes it via `import_api`, and immediately fires off a fresh check using `trigger_audit`. You watch the terminal while the agent handles the entire security testing sequence.

Pull 42Crunch reports into your editor

Reviewing static security audit results happens right inside your IDE with this integration. Cascade reads the output from `get_audit_report` and formats the findings directly in your editor pane. Developers fix vulnerabilities faster when they see the exact lines causing issues. By calling `get_api` to check the current security score, Windsurf knows exactly which endpoints need patches before you commit the code.

Track dynamic conformance scans

Live API testing data flows straight to your workspace through the 42Crunch MCP server. Windsurf checks the status of active tests by running `list_scans` against your running environments. When a test finishes, the agent pulls the detailed breakdown using `get_scan_report`. You get the exact failure points mapped to your local source code, letting you patch authentication bypasses or injection flaws immediately.

Setup guide

Set up 42Crunch MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the 42Crunch MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my 42Crunch payment history." If connected, Cascade will call the 42Crunch tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "42crunch-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by 42Crunch. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect 42Crunch now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about 42Crunch MCP in Windsurf

Open your MCP Settings UI inside Windsurf. Add the Vinkius endpoint under the mcpServers key or use the built-in marketplace for a quick install.

Yes, Cascade handles the entire flow. It imports your swagger files and triggers the audits without needing step-by-step prompts.

You need the exact Collection ID. Tell Cascade to run `list_collections` first so it can grab the right identifier for subsequent commands.

Cascade acts autonomously but you control the boundaries. If you tell the agent to clean up old definitions, it executes `delete_api` on its own.

Windsurf routes your API schemas and security scores through a V8 Isolate Sandbox. Vinkius drops the ephemeral container the second your session ends, keeping your infrastructure metadata private.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript