NeuralTrust | Platform for Agent Security.

Windsurf is a code editor whose Cascade agent can read repositories, edit files, run shell commands, and call MCP tools on a developer’s machine. There is no TrustGuard hook for Windsurf yet. Point Cascade at a TrustGate MCP consumer so tool access, identity, and rate limits stay on the gateway.

Connect to TrustGate

Create or open an MCP consumer and bind the registries Cascade should reach.
Copy the MCP URL from the consumer Connect tab.
In Windsurf, open Settings → Cascade → MCP Servers, or edit ~/.codeium/windsurf/mcp_config.json.

Windsurf’s HTTP field is serverUrl (not url):

{
  "mcpServers": {
    "TrustGate": {
      "serverUrl": "https://<mcp-host>/<consumer>/mcp"
    }
  }
}

Use OAuth when the consumer requires it — Cascade starts the sign-in flow for servers that advertise it. For an ag_… API key, add a headers block:

{
  "mcpServers": {
    "TrustGate": {
      "serverUrl": "https://<mcp-host>/<consumer>/mcp",
      "headers": {
        "Authorization": "Bearer <ag_…>"
      }
    }
  }
}

Do not put a TrustGuard tgk_… collector key in this file.

Verify

Confirm TrustGate is connected in the Cascade MCP panel and that its tools are listed.
Ask Cascade to use a tool from a toolkit bound to that consumer.
Confirm the call in TrustGate metrics.