How to Use the Tyk MCP in Windsurf

Q: How can Windsurf list all API definitions in Tyk?

You run listapis. This immediately pulls a complete inventory of every defined API from your Tyk Gateway. It's the fastest way to get a full picture of what services are live.

Q: Does Windsurf handle policy changes for Tyk?

Yeah, it does. You use createpolicy and updatepolicy to manage your security ruleset. The agent can even call hotreload so the changes take effect right away.

Q: What if I need to delete an API key using Windsurf?

You use the deletekey tool, requiring the specific gateway secret. This removes the credential and revokes access immediately, which is critical for security audits.

Q: Can Tyk's key creation be managed by Windsurf?

Absolutely. The agent can use createkey or createorgkey to issue new credentials on your behalf, managing the identity layer for your application.

Manage your entire API Gateway lifecycle—from defining APIs to managing policies—all within Windsurf.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Tyk MCP to Windsurf

Create your Vinkius account to connect Tyk to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Tyk with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Define and list all available APIs

Run `list_apis` to see every API definition currently managed by Tyk. You can then use `create_api_definition` to roll out a brand new API structure. This lets your agent set up the entire service mesh, ensuring that when you define an endpoint, it's immediately available for consumption.

Govern security policies and definitions

To enforce new rules, call `create_policy` to build a specific security policy. You can also review existing guardrails using `get_policy` or modify them with `update_policy`. Need an immediate change? Run `hot_reload` to force the gateway to load the latest policies without downtime.

Manage API keys and credentials

Start by using `create_key` to generate a new session object key. You can manage organizational access with `create_org_key`, ensuring proper separation of duties. You'll also need tools like `get_key` to retrieve details on specific keys, or use `delete_key` if the credential is no longer valid.

Setup guide

Set up Tyk MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the Tyk MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my Tyk payment history." If connected, Cascade will call the Tyk tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "tyk-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Tyk. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Tyk now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Tyk MCP in Windsurf

You run `list_apis`. This immediately pulls a complete inventory of every defined API from your Tyk Gateway. It's the fastest way to get a full picture of what services are live.

Yeah, it does. You use `create_policy` and `update_policy` to manage your security ruleset. The agent can even call `hot_reload` so the changes take effect right away.

You use the `delete_key` tool, requiring the specific gateway secret. This removes the credential and revokes access immediately, which is critical for security audits.

Absolutely. The agent can use `create_key` or `create_org_key` to issue new credentials on your behalf, managing the identity layer for your application.

This server handles API keys (Session Objects). These keys are the primary access tokens that authenticate users and applications interacting with your APIs. Always treat these credentials as highly sensitive.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript