How to Use the Nmap Online MCP in Windsurf

Q: How do I set up Nmap Online inside Windsurf?

Open your /.codeium/windsurf/mcpconfig.json file or use the Settings UI under Cascade. Add the server under the mcpServers key. Cascade will automatically discover all ten tools once you save the configuration.

Q: Does the Nmap Online integration in Windsurf support wildcard subdomains?

The listsubdomains tool searches for known subdomains of a target. Windsurf uses this data to find hidden endpoints, though it depends on active passive DNS records and scraping rather than brute force.

Run network reconnaissance and port scans directly inside Windsurf without leaving your workspace.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Nmap Online MCP to Windsurf

Create your Vinkius account to connect Nmap Online to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Nmap Online with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Automate target footprinting in Windsurf Cascade

Cascade needs to map out a target network before writing any code, which is why it uses `dns_lookup` to resolve IPs. With this MCP Server, Cascade immediately chains `list_subdomains` to map the attack surface in one go without bugging you for permission. Then, the agent takes that output and runs `whois_lookup` to pull ownership data. You get a clean, structured footprint report generated entirely in the background.

Diagnose connection bottlenecks on the fly

When an API endpoint times out, your agent triggers `ping_host` to check if it's still alive. It can also run `traceroute` to inspect the actual hop paths to see exactly where the connection drops. To inspect configuration issues, it pulls the server's HTTP response metadata using `get_http_headers`. This gives you immediate visibility into server configurations and potential firewall blocks right inside your IDE.

Conduct basic port audits from your workspace

Your agent runs `nmap_scan` to check which ports are open on your staging servers. It flags exposed services that shouldn't be public. For verification, it combines this with `reverse_dns` and `geoip_lookup` to check that your DNS records point to the correct physical locations. Everything runs inside a secure MCP sandbox so your local environment stays clean.

Setup guide

Set up Nmap Online MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the Nmap Online MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my Nmap Online payment history." If connected, Cascade will call the Nmap Online tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "nmap-online-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Nmap Online. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Nmap Online now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Nmap Online MCP in Windsurf

Open your `~/.codeium/windsurf/mcp_config.json` file or use the Settings UI under Cascade. Add the server under the `mcpServers` key. Cascade will automatically discover all ten tools once you save the configuration.

Yes. Because Cascade is autonomous, you can give it a goal like auditing a domain. It will chain `nmap_scan` and `list_subdomains` to build a report without requiring a prompt for every single step.

The `list_subdomains` tool searches for known subdomains of a target. Windsurf uses this data to find hidden endpoints, though it depends on active passive DNS records and scraping rather than brute force.

Vinkius manages the execution in ephemeral V8 sandboxes. Your scan data is returned directly to Windsurf and isn't stored permanently on our servers, keeping your reconnaissance data private.

This server only touches network metadata like IP addresses, domains, and port states. Vinkius runs every MCP request in a zero-trust, ephemeral sandbox, meaning your targets and scan results never persist on disk.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript