How to Use the JumpCloud MCP in Windsurf

Let Windsurf run a full security audit on your JumpCloud directory. Cascade connects the dots from users to systems to policies for you.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect JumpCloud MCP to Windsurf

Create your Vinkius account to connect JumpCloud to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup JumpCloud with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Audit User Access from End to End

Give Windsurf a goal, like "Check the access level for user Jane Doe." Cascade, Windsurf's autonomous agent, takes it from there. It can start with `get_user` to find her account, check her permissions with `list_user_groups`, and then use `list_applications` to see exactly what software she can access. This is where it gets good. You don't have to prompt each step. Cascade chains the tools together automatically to give you a complete picture in one shot. It's the difference between asking for directions one turn at a time and just getting the final destination.

Map Your Entire Device Fleet with Windsurf

You need to know if your devices are compliant. Instead of pulling reports manually, just ask Windsurf. It uses `list_systems` to get every managed device and `list_system_groups` to see how they're categorized, like "Production Servers" or "Employee Laptops". Then, Cascade automatically cross-references that information with `list_policies`. You can ask, "Show me all production servers that don't have the disk encryption policy applied." Windsurf will run the sequence and give you a straight answer. This MCP Server gives it the raw data needed to make those critical connections.

Verify Infrastructure and Network Health

This MCP server lets Windsurf look into your core infrastructure setup. Your agent can call `list_directories` to see every identity source you have configured, whether it's Active Directory, Google Workspace, or something else. From there, it can pivot to security. Cascade can check `list_networks` to audit your RADIUS configurations. This makes it easy to verify that only users from trusted directories are allowed onto secure WiFi or VPNs. It finds the gaps for you.

Setup guide

Set up JumpCloud MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the JumpCloud MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my JumpCloud payment history." If connected, Cascade will call the JumpCloud tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "jumpcloud-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by JumpCloud. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect JumpCloud now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about JumpCloud MCP in Windsurf

Windsurf connects to the JumpCloud tools to autonomously chain commands. For an audit, you can ask it to check for inactive users with active app sessions by combining `list_users` and `list_applications`, and it will execute the entire workflow for you.

No. This MCP server provides read-only access to your JumpCloud environment. The tools are designed for auditing and reporting, so you can `get_user` or `list_systems`, but not change them.

Use the built-in MCP Marketplace inside Windsurf. Find the JumpCloud server and click install. It handles the configuration automatically, so you don't have to edit any JSON files.

Yes, it's a standard MCP server. Any compatible client can connect to it, but the experience is tailored. Windsurf's value is how its Cascade agent can autonomously chain the JumpCloud tools together.

Your queries for JumpCloud user metadata and system information are processed in an ephemeral, sandboxed environment on Vinkius. The server is stateless, meaning no data from your requests is ever stored after the operation completes. Your API key is encrypted in transit and at rest.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript