How to Use the Descope (Auth Platform) MCP in Windsurf

Q: Can I manage tenants and roles with the Descope (Auth Platform) server in Windsurf?

Yes, absolutely. The server includes management tools like mgmtcreatetenant and mgmtcreaterole. You can instruct Cascade to set up new tenants or define access roles directly from your IDE.

Tell Windsurf to handle user auth from start to finish. Cascade creates tenants, adds users, and sets up access without you lifting a finger.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Descope (Auth Platform) MCP to Windsurf

Create your Vinkius account to connect Descope (Auth Platform) to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Descope (Auth Platform) with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Onboard New Users Without a Single Click

This MCP server connects Windsurf to your Descope account. Now you can tell Cascade to run a full onboarding sequence. It will create a new tenant with `mgmt_create_tenant`, add a user with `mgmt_create_user`, and then generate their first access key using `mgmt_create_access_key`. Cascade doesn't need you to approve each step. Just give it the goal. It can handle different auth methods, like sending an email OTP with `auth_otp_signup_email` or a magic link with `auth_magiclink_signup_email`. You just see the final result.

Manage Roles and Permissions from Windsurf

Use natural language in Windsurf to manage your Descope roles and permissions. This server exposes tools like `mgmt_create_role` and `mgmt_create_permission`. Just ask Cascade to "create a new 'editor' role with permission to update users." It's not just for creating things. You can have it search for specific users with `mgmt_search_users`, get their details with `mgmt_get_user`, and then change their access level with `mgmt_update_user`. It's all done in the background while you work.

Run Multi-Step Auth Flows in Windsurf

This server isn't just for basic CRUD. It gives Windsurf's Cascade agent the tools for multi-step authentication protocols. For example, it can start a WebAuthn signup with `auth_webauthn_signup_start` and then complete it with `auth_webauthn_signup_finish`. The same goes for passwordless flows. Cascade can initiate a sign-up with an Enchanted Link using `auth_enchantedlink_signup`, poll for the session with `auth_enchantedlink_poll`, and finally verify the token with `auth_enchantedlink_verify`. You describe the outcome, Windsurf handles the state.

Setup guide

Set up Descope (Auth Platform) MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the Descope (Auth Platform) MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my Descope (Auth Platform) payment history." If connected, Cascade will call the Descope (Auth Platform) tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "descope-auth-platform-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Descope. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Descope (Auth Platform) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Descope (Auth Platform) MCP in Windsurf

You just tell Windsurf's Cascade agent what you need, like, "Create a user for jane.doe@example.com in the 'Acme' tenant." Cascade uses the `mgmt_create_user` tool from this MCP server to execute the request in your Descope project.

Yes, absolutely. The server includes management tools like `mgmt_create_tenant` and `mgmt_create_role`. You can instruct Cascade to set up new tenants or define access roles directly from your IDE.

It's fast. Use the built-in MCP Marketplace in Windsurf to find and install it with one click. Or, you can add it manually in your `mcp_config.json` file and hit refresh in the MCP panel.

It sure can. The server provides tools for OTPs, Magic Links, and even WebAuthn. You can tell Cascade to "sign up a user with an SMS OTP," and it will use the `auth_otp_signup_sms` and `auth_otp_verify_sms` tools to complete the flow.

This server only touches user authentication data like emails, phone numbers, and user IDs required for Descope's functions. All traffic is sent directly to Descope's API through the Vinkius ephemeral sandbox. Your code and other local data are never exposed.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript