🌊 Windsurf — Cascade AI Agent

Windsurf
MCP Server Setup Guide

Windsurf by Codeium features the Cascade AI agent with full MCP support. Configuration is done through the settings UI — no JSON editing required.

HTTP + stdio UI-based config Cascade agent

Transport

HTTP (recommended)

Config method

Settings UI

Agent

Cascade

LLM

Claude, GPT, Gemini

Prerequisites

Windsurf — download at codeium.com/windsurf
anonym.legal API key — Pro or Business plan

Installation via Settings UI

Open Windsurf Settings

Go to Windsurf → Settings (or press Cmd/Ctrl+,). Navigate to the Cascade section, then MCP Servers.

Add New MCP Server

Click + Add Server. Fill in the form:

Name:      anonym-legal
Type:      HTTP (Streamable HTTP)
URL:       https://anonym.legal/mcp
Headers:   Authorization: Bearer YOUR_API_KEY

Save and Verify

Click Save. Windsurf will connect and show the server status as Connected with 7 tools listed.

Alternative: JSON Config File

Windsurf also supports a JSON config file at ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "anonym-legal": {
      "serverUrl": "https://anonym.legal/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}

Available Tools (7)

anonym_legal_analyze_text
free

Scan text and return all detected PII entities with type, position, and confidence score — without modifying anything.

anonym_legal_anonymize_text
tokens

Replace PII with reversible tokens using configurable operators per entity type. Returns anonymized text + session token map.

anonym_legal_detokenize_text
free

Restore original PII values from session tokens. Used to de-anonymize AI responses.

anonym_legal_get_balance
free

Returns your current token balance, plan tier, and next reset date.

anonym_legal_estimate_cost
free

Preview token cost for a text before anonymizing it. No tokens consumed.

anonym_legal_list_sessions
free

List all active tokenization sessions with creation time, entity count, and expiry.

anonym_legal_delete_session
free

Delete a session and all stored tokens — for GDPR right-to-erasure compliance.

Operators (6)

replace

Substitute with custom text or entity type label.
John Smith → [CLIENT] or [PERSON]

redact

Remove entirely — no trace left in the text.
john@acme.com → (removed)

hash

SHA-256 or SHA-512 — deterministic, one-way. Enables deduplication across documents.
John Smith → a3f9b1...

encrypt

AES-256 with your personal key — reversible only by key holder.
4111-xxxx → enc:U2FsdGVkX1...

mask

Partial replacement — configurable chars from start or end.
john@acme.com → jo**@****.com

keep

Detect but pass through unchanged. Useful to audit without modifying.
John Smith → John Smith (tracked)

Troubleshooting

Server shows "Error" status in Windsurf settings

Verify your API key and plan. Windsurf's MCP panel shows connection errors in real time. Also ensure URL is exactly https://anonym.legal/mcp (no trailing slash).

Cascade doesn't use MCP tools automatically

Ask Cascade explicitly: "Use the anonym_legal_analyze_text tool to scan this text." Cascade can auto-invoke but may prefer explicit instructions for MCP tools.

WindsurfMCP Server Setup Guide