How to Use the CyberArk Privilege Cloud MCP in Windsurf
Cascade manages your CyberArk Privilege Cloud vaults directly from Windsurf, handling credential rotations and session kills automatically.
Works with every AI agent you already use
…and any MCP-compatible client
Connect CyberArk Privilege Cloud MCP to Windsurf
Create your Vinkius account to connect CyberArk Privilege Cloud to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.
Windsurf automates privileged credential lifecycle
Cascade uses `add_account` and `delete_account` to handle your vault entries without you ever leaving the editor. It maps your target platforms to specific IDs so rotation policies stay intact. Stop wasting time manual-inputting credentials. Let the agent handle the heavy lifting while you focus on the code.
Real-time session control in Windsurf
If your security team flags a weird login, use `terminate_session` to kill that connection instantly. This MCP Server gives your agent the authority to act before damage happens. It keeps your perimeter tight by putting incident response inside your IDE. You see the alert, you run the tool, the threat ends.
Audit your vault access via Windsurf
Query your entire PAM setup using `list_safes` and `list_users` to see exactly who has access to your production secrets. Cascade checks these lists to ensure your RBAC policies aren't drifting. Visibility is everything. You'll know which groups own which secrets without digging through the web console.
Set up CyberArk Privilege Cloud MCP in Windsurf
Prerequisites
- Windsurf IDE installed (macOS, Windows, or Linux)
- Active Vinkius subscription with a valid endpoint token
- 1
Open MCP configuration
Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open
~/.codeium/windsurf/mcp_config.json. - 2
Add the CyberArk Privilege Cloud MCP
Paste the JSON snippet shown on the right into the
mcpServersobject. Replace[YOUR_TOKEN_HERE]with your endpoint token from cloud.vinkius.com. - 3
Refresh MCPs
Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
- 4
Verify in Cascade
Start a new Cascade conversation and ask something like "Show my CyberArk Privilege Cloud payment history." If connected, Cascade will call the CyberArk Privilege Cloud tools directly. You will see a green dot next to the server name in the MCP panel.
{
"mcpServers": {
"cyberark-privilege-cloud-mcp": {
"url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
}
}
}Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by CyberArk. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.
Why Choose Vinkius
Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.
Real-time monitoring
Live
visibility into every interaction
Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.
Built-in savings
60%
lower AI costs
Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.
Single dashboard
One
place for every integration
Every tool your AI connects to, managed from a single screen. One account, complete control.
Common questions about CyberArk Privilege Cloud MCP in Windsurf
Use it with your favorite AI tools
Connect this server to Cursor, Claude, VS Code, and more.
Start using the CyberArk Privilege Cloud MCP today
We host it, we monitor it, we maintain it. You just paste one token.
