How to Use the Hanko (Passkey Auth) MCP in Windsurf

Q: How does Windsurf debug a failed Hanko (Passkey Auth) registration?

Cascade analyzes the error trace and calls passkeyregistrationinit again with corrected options. It checks your local WebAuthn configuration against the Hanko API responses to pinpoint the issue.

Let Cascade autonomously wire up Hanko passwordless registration and login flows inside your Windsurf workspace.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Hanko (Passkey Auth) MCP to Windsurf

Create your Vinkius account to connect Hanko (Passkey Auth) to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Hanko (Passkey Auth) with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Automate Passkey Registration with Windsurf

This Hanko (Passkey Auth) MCP Server lets Cascade handle WebAuthn setup from end to end. When you ask Windsurf to configure a signup flow, it calls `passkey_registration_init` to grab the public key options and prepares the frontend challenge. Cascade doesn't stop there. It writes the client-side handlers, captures the browser response, and passes it straight to `passkey_registration_finalize` to register the credential. You get a working registration loop without manually pasting JSON schemas.

Automated JWT Verification in Cascade

This MCP Server toolset exposes `public_validate_session` and `public_get_jwks` directly to your Windsurf workspace. When Cascade runs your backend tests and hits a token error, it queries these endpoints to check your JWKS configuration. It modifies your local auth middleware to use the correct public keys, runs the verification loop again, and confirms your session validation works. You do not have to debug token signing keys by hand.

Manage Users and Credentials via Windsurf

This MCP Server gives your IDE client direct admin access to your Hanko backend. Cascade uses `admin_list_users` and `admin_get_user` to inspect test accounts when debugging authentication failures. If a test user loses their security key during development, Cascade calls `admin_list_user_credentials` and `passkey_delete_credential` to clean up the stale WebAuthn credentials. You manage your sandbox user database without leaving your code editor.

Setup guide

Set up Hanko (Passkey Auth) MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the Hanko (Passkey Auth) MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my Hanko (Passkey Auth) payment history." If connected, Cascade will call the Hanko (Passkey Auth) tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "hanko-passkey-auth-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Hanko. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Hanko (Passkey Auth) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Hanko (Passkey Auth) MCP in Windsurf

Open your settings in Windsurf and add the server configuration under the mcpServers key in your JSON configuration. Cascade immediately discovers the auth tools and can start initializing logins.

Yes, Cascade chains the authentication steps together. It calls `passkey_login_init` to get the challenge, prompts you to touch your security key, and automatically sends the payload to `passkey_login_finalize`.

Cascade analyzes the error trace and calls `passkey_registration_init` again with corrected options. It checks your local WebAuthn configuration against the Hanko API responses to pinpoint the issue.

Yes, if you configure the admin API key, Cascade can run operations like `admin_create_user` to set up mock accounts. This makes setting up local integration tests incredibly fast.

All session tokens and WebAuthn challenges are processed locally in your Windsurf workspace or inside the secure Vinkius sandbox. Your raw private keys never leave your physical device, and the MCP Server only handles the cryptographic challenges required for verification.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript