How to Use the Kolide MCP in Windsurf

Q: How do I connect the Kolide MCP server to Windsurf?

Add the server block to your /.codeium/windsurf/mcpconfig.json file. Windsurf automatically discovers the tools when you restart or refresh the Cascade panel.

Let Windsurf autonomously audit your device fleet, isolate security issues, and track endpoint health with this direct Kolide integration.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Kolide MCP to Windsurf

Create your Vinkius account to connect Kolide to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Kolide with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Run Autonomous Fleet Security Audits with Windsurf

The `list_kolide_devices` tool lets Cascade pull your entire hardware inventory to check OS versions and compliance flags. Instead of making you manually query each machine, Cascade scans the fleet, flags outdated systems, and cross-references them with known vulnerabilities. You get a clear picture of your hardware exposure in seconds. Cascade chains this device list with other queries to pinpoint exactly which machines need immediate patches before they cause a breach.

Trace Security Issues to Specific Users

The `list_kolide_issues` tool exposes active security failures across your organization's endpoints. Cascade automatically takes these issues, maps them to owners using `get_person_details`, and drafts remediation alerts. You don't have to waste time tracking down who owns a vulnerable laptop. Your AI client handles the correlation so you can focus on fixing the actual security gaps.

Track Admin Actions via Audit Logs

The `list_kolide_audit_logs` tool exposes the history of configuration changes and administrative actions. Cascade reads this log stream to detect unauthorized modifications or suspicious policy overrides. By connecting this MCP server to your workspace, you let Cascade run continuous compliance checks. It flags anomalies without requiring you to write custom log parsers.

Setup guide

Set up Kolide MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the Kolide MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my Kolide payment history." If connected, Cascade will call the Kolide tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "kolide-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Kolide. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Kolide now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Kolide MCP in Windsurf

Add the server block to your `~/.codeium/windsurf/mcp_config.json` file. Windsurf automatically discovers the tools when you restart or refresh the Cascade panel.

Cascade cannot modify device settings directly since the API is read-only. However, it uses `get_check_details` to find the exact fix instructions and drafts clear remediation messages for your users.

No, this MCP server runs in the Vinkius cloud sandbox and talks directly to the Kolide API. Windsurf only needs your Vinkius connection token to start querying fleet data.

The managed Vinkius platform handles the underlying API connection and buffers requests. The MCP integration schedules queries using `get_kolide_fleet_stats` to avoid hitting rate limits during large fleet scans.

Your device hardware profiles and compliance logs never persist on Vinkius servers. Every query runs inside an isolated, ephemeral V8 sandbox that destroys all session data the moment Cascade finishes its task.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript