How to Use the UpGuard MCP in Windsurf

Q: How does UpGuard help Windsurf find vulnerabilities?

UpGuard surfaces active risks by calling listaccountrisks. It doesn't just list warnings; it gives you a granular view of what needs fixing across your entire connected environment. Your agent handles this automatically.

Q: Can I check vendor risks in Windsurf using UpGuard?

Absolutely. The MCP Server exposes listvendorrisks and listvendors. This lets you autonomously compare your required security standards against the actual risk profile of every third-party vendor.

Q: What data can UpGuard access for user risk in Windsurf?

UpGuard monitors user accounts using listuserrisks and tracks specific identity breaches via listidentitybreaches. This allows your agent to build a comprehensive picture of who is at elevated risk.

Q: Does UpGuard handle IP and domain monitoring with Windsurf?

Yep. It uses dedicated tools like listmonitoreddomains and listmonitoredips. These functions ensure that every public-facing asset, whether a site or an address block, is continuously checked for vulnerabilities.

Get a complete view of your attack surface right inside Windsurf.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect UpGuard MCP to Windsurf

Create your Vinkius account to connect UpGuard to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup UpGuard with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Assess third-party vendor risk

When you need to vet a supplier, start with `list_vendors`. This lets your agent check if any monitored vendors have open security issues. You'll get detailed risk data for specific companies by running `get_vendor` or using `list_vendor_risks`, so you know exactly who’s lagging on compliance.

Track user and identity exposure

To see how exposed your employees are, use `list_user_risks`. This gives you a clear breakdown of every monitored user's risk score. Your agent also pulls in data from `list_identity_breaches`, helping you spot compromised accounts before they cause trouble.

Map domains and SaaS apps

To map your full digital footprint, Windsurf can use tools like `list_monitored_domains` and `list_monitored_ips`. It also tracks third-party applications via `list_saas_apps`, giving you a clear picture of every service connected to your organization.

Setup guide

Set up UpGuard MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the UpGuard MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my UpGuard payment history." If connected, Cascade will call the UpGuard tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "upguard-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by UpGuard. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect UpGuard now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about UpGuard MCP in Windsurf

UpGuard surfaces active risks by calling `list_account_risks`. It doesn't just list warnings; it gives you a granular view of what needs fixing across your entire connected environment. Your agent handles this automatically.

Absolutely. The MCP Server exposes `list_vendor_risks` and `list_vendors`. This lets you autonomously compare your required security standards against the actual risk profile of every third-party vendor.

UpGuard monitors user accounts using `list_user_risks` and tracks specific identity breaches via `list_identity_breaches`. This allows your agent to build a comprehensive picture of who is at elevated risk.

Yep. It uses dedicated tools like `list_monitored_domains` and `list_monitored_ips`. These functions ensure that every public-facing asset, whether a site or an address block, is continuously checked for vulnerabilities.

This server touches identity breach records. It processes details regarding compromised accounts and credentials through the `list_identity_breaches` tool. This visibility is crucial for maintaining compliance.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript