Connect Windsurf

Add the server

Open ~/.codeium/windsurf/mcp_config.json — Settings, then Cascade, then Manage MCP servers gets you there — and add the sentrasec server:

{  "mcpServers": {    "sentrasec": {      "command": "sentrasec",      "args": ["mcp", "serve"],      "env": {        "SENTRASEC_APP_ID": "app_...",        "SENTRASEC_APP_KEY": "sk_prod_..."      }    }  }}

Replace sk_prod_... with your API key. See Authentication for how to create one.

Use it

Press Refresh in the MCP panel so Cascade reconnects. Then ask it something like:

Scan this repository and walk me through anything high severity before I open a PR.

See the tools reference for everything the agent can call.