How to Use the NetBird MCP in Windsurf

Q: How do I configure NetBird with Windsurf?

Add the MCP Server to your mcpconfig.json file. Cascade automatically discovers the network management tools upon connection.

Q: Can Windsurf read my NetBird traffic logs?

Yes. The agent pulls detailed connection histories using listnetworktrafficevents. This helps Cascade troubleshoot routing issues autonomously.

Windsurf configures your NetBird overlay networks autonomously without leaving the IDE via this MCP Server.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect NetBird MCP to Windsurf

Create your Vinkius account to connect NetBird to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup NetBird with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Map Zero Trust Topologies via Windsurf

The NetBird MCP Server connects Cascade directly to your networking control plane. Tell your agent to segment an engineering environment, and it triggers `create_network` to build the base infrastructure. It then issues `create_group` to establish logical boundaries around specific developer machines. You don't have to click through web dashboards to assign access. Cascade chains `create_policy` with your new groups, defining exact protocol and port rules. When a new hire joins, the agent runs `create_setup_key` to generate a reusable enrollment token instantly.

Enforce Device Compliance Automatically

Security requires verifying the endpoints connecting to your infrastructure. Windsurf handles this by calling `create_posture_check` to mandate specific OS versions or geographic locations before allowing access. If an unpatched machine tries to connect, the system blocks it at the edge. Managing these rules at scale usually means endless manual updates. Your agent alters requirements on the fly using `update_posture_check` when new vulnerabilities drop. It can even pull `list_posture_checks` to audit your current fleet requirements against company standards.

Multi-Tenant MSP Administration

Managing multiple client networks gets messy fast. You can instruct your agent to spin up isolated client environments using `create_msp_tenant`. This keeps separate organizations logically partitioned while you manage them from a single root account. Billing and access controls map directly to these partitions. Windsurf updates client packages via `update_msp_tenant_subscription` based on their contract tier. It also accepts inbound management requests through `respond_msp_tenant_invite` if a client wants you to take over their existing setup.

Setup guide

Set up NetBird MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the NetBird MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my NetBird payment history." If connected, Cascade will call the NetBird tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "netbird-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by NetBird. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect NetBird now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about NetBird MCP in Windsurf

Add the MCP Server to your mcp_config.json file. Cascade automatically discovers the network management tools upon connection.

Yes. The agent pulls detailed connection histories using `list_network_traffic_events`. This helps Cascade troubleshoot routing issues autonomously.

You maintain full control over the execution state. If a bad rule gets pushed, you can revert it manually or have the agent run `delete_policy` to strip the offending configuration.

You can define internal DNS resolution boundaries. The tools `create_nameserver` and `update_dns_settings` handle custom domain routing across your peers.

Vinkius isolates your session inside a V8 sandbox. This prevents third-party access to the raw IP addresses and initiator details exposed by `list_audit_events`. Your endpoint token remains ephemeral.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript