How to Use the Corbado MCP in Windsurf
Handle user auth and passkey lifecycles inside Windsurf with Cascade, your autonomous agent for secure identity management.
Works with every AI agent you already use
…and any MCP-compatible client
Connect Corbado MCP to Windsurf
Create your Vinkius account to connect Corbado to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.
Manage Corbado user identities in Windsurf
Cascade handles the entire user lifecycle by triggering `create_user` and `list_users` without you leaving the editor. It automates account provisioning so you can focus on the application logic rather than manual database entries. Updating records is just as direct. Use `update_user` to modify existing profiles or `delete_user` when you need to clean up test data during active development.
Automate passkey flows for Windsurf projects
Your agent uses `init_passkey_login` and `finish_passkey_login` to verify identities without passwords. This MCP Server allows Cascade to execute the full handshake, ensuring your authentication layer is phishing-resistant by design. If you need to manage recovery or secondary methods, call `list_connect_passkeys`. The agent handles the output, letting you see exactly which credentials are linked to a specific user account.
Control authentication processes with Cascade
Trigger complex auth sequences using `init_auth_process` and `reset_auth_process`. Windsurf executes these steps in order, creating a predictable path for users to sign up or verify their identity. When you need to handle sessions, call `list_sessions` or `revoke_session`. Your AI agent keeps the authentication state clean, preventing orphaned sessions from cluttering your development environment.
Set up Corbado MCP in Windsurf
Prerequisites
- Windsurf IDE installed (macOS, Windows, or Linux)
- Active Vinkius subscription with a valid endpoint token
- 1
Open MCP configuration
Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open
~/.codeium/windsurf/mcp_config.json. - 2
Add the Corbado MCP
Paste the JSON snippet shown on the right into the
mcpServersobject. Replace[YOUR_TOKEN_HERE]with your endpoint token from cloud.vinkius.com. - 3
Refresh MCPs
Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
- 4
Verify in Cascade
Start a new Cascade conversation and ask something like "Show my Corbado payment history." If connected, Cascade will call the Corbado tools directly. You will see a green dot next to the server name in the MCP panel.
{
"mcpServers": {
"corbado-mcp": {
"url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
}
}
} Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Corbado. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.
Why Choose Vinkius
Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.
Real-time monitoring
Live
visibility into every interaction
Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.
Built-in savings
60%
lower AI costs
Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.
Single dashboard
One
place for every integration
Every tool your AI connects to, managed from a single screen. One account, complete control.
Common questions about Corbado MCP in Windsurf
Use it with your favorite AI tools
Connect this server to Cursor, Claude, VS Code, and more.
Start using the Corbado MCP today
We host it, we monitor it, we maintain it. You just paste one token.