Skip to main content
Connect Jsmon to Windsurf (by Codeium) — the AI-powered IDE — using the Model Context Protocol (MCP). Once connected, you can access Jsmon’s scan data, trigger scans, and manage workspaces directly from Windsurf’s Cascade AI assistant.

​
How It Works

Jsmon provides a remote MCP server at:
Windsurf supports remote MCP servers via HTTP transport. You add the Jsmon server URL to Windsurf’s MCP config file, and authenticate through the OAuth flow on first connection.

​
Setup

1

Enable MCP in Windsurf

Open Windsurf and go to Settings → Cascade → Advanced Settings. Make sure MCP is turned on.
2

Open the MCP Config File

The MCP configuration file is located at:macOS / Linux:
Windows:
Create the file if it doesn’t exist.
3

Add Jsmon MCP Server

Add the following to your mcp_config.json:
Windsurf uses serverUrl instead of url for remote HTTP servers. Using the wrong key will cause the connection to fail silently.
4

Authenticate with Jsmon

Save the config file. Windsurf monitors the file for changes and picks up the new server automatically — no restart needed. On first use, an OAuth flow will open in your browser. Sign in to your Jsmon account and approve the requested permissions.
5

Use Jsmon in Cascade

Open Cascade (Windsurf’s AI assistant) and start asking questions about your Jsmon data. You can trigger scans, view results, and manage workspaces inline.

​
Use Cases

Windsurf + Jsmon is ideal for developers who want security context while coding:
  • Surface secrets during development — “Check if any API keys were found on example.com”
  • Review attack surface — “What subdomains does Jsmon know about for my domain?”
  • Scan while building — “Scan this URL for JavaScript intelligence”
  • Look up endpoints — “Show me all API paths found in workspace X”
  • Monitor domains — “What domains am I monitoring on Jsmon?”

​
Permissions

During OAuth authorization, you configure the following scopes:
Windsurf auto-detects config file changes — you don’t need to restart the editor after editing mcp_config.json.