How to Use the Duo Security (Two-Factor Authentication API) MCP in Windsurf

Q: How does Windsurf use the Duo Security (Two-Factor Authentication API) to verify user status?

Cascade runs preauth to check if a user is active and see their enrolled 2FA factors. It maps the returned factors so you know if they can receive push notifications or SMS codes.

Q: What happens if a Duo Security (Two-Factor Authentication API) auth request times out in Windsurf?

Cascade handles this by running auth and polling authstatus in a loop. If the user ignores the push notification, Cascade catches the timeout response and asks you how to proceed.

Q: How does the MCP Server check my Duo API connection status?

You can ask Cascade to run checkauth to verify your integration keys and signature generation. It also uses pingauth to ensure the Duo service is alive and reachable.

Trigger 2FA checks and manage Duo Security user profiles autonomously while Windsurf Cascade chains your security workflows.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Duo Security (Two-Factor Authentication API) MCP to Windsurf

Create your Vinkius account to connect Duo Security (Two-Factor Authentication API) to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Duo Security (Two-Factor Authentication API) with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Automate user onboarding in Windsurf

The `create_user` tool lets you provision new team members directly from your editor without opening the browser. Windsurf uses this MCP Server to run this endpoint, immediately followed by `preauth` to check their enrollment status. If you are handling a massive hiring wave, the agent chains `bulk_create_users` to provision entire departments in one go. Cascade figures out the sequence on its own. It reads your directory config, generates the Duo usernames, and runs the creation script. You just watch the output without jumping between your terminal and the admin dashboard.

Real-time 2FA verification chains

The `auth` tool triggers second-factor authentication push notifications directly to user devices. This MCP Server lets Cascade execute this call, then immediately poll `auth_status` until the transaction resolves. The agent manages the asynchronous loop in the background while you focus on writing your application logic. If something fails, Cascade instantly reads the error payload, runs `ping_auth` to check the Duo API connection, and reports the exact failure point.

Manage MSP child accounts and credits

The `list_accounts` tool retrieves all MSP child accounts so you can audit them inside your workspace. Windsurf can fetch your partner accounts and audit their status directly from the editor panel. If a tenant runs low on SMS or voice tokens, Cascade can check `get_telephony_credits` and update allocations using `set_telephony_credits`. It turns complex MSP administration into a simple conversation with your editor.

Setup guide

Set up Duo Security (Two-Factor Authentication API) MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the Duo Security (Two-Factor Authentication API) MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my Duo Security (Two-Factor Authentication API) payment history." If connected, Cascade will call the Duo Security (Two-Factor Authentication API) tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "duo-security-two-factor-authentication-api-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Duo Security. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Duo Security (Two-Factor Authentication API) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Duo Security (Two-Factor Authentication API) MCP in Windsurf

Cascade runs `preauth` to check if a user is active and see their enrolled 2FA factors. It maps the returned factors so you know if they can receive push notifications or SMS codes.

Yes. You can tell Cascade to process a CSV list of new hires, and it will call `bulk_create_users` to provision up to 100 accounts at once.

Cascade handles this by running `auth` and polling `auth_status` in a loop. If the user ignores the push notification, Cascade catches the timeout response and asks you how to proceed.

You can ask Cascade to run `check_auth` to verify your integration keys and signature generation. It also uses `ping_auth` to ensure the Duo service is alive and reachable.

Your Duo integration key, secret key, and user email addresses are kept strictly within your local environment. Windsurf passes these sensitive keys to the secure local process to sign requests, meaning your Duo secret keys never touch external servers or public logs.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript