Install and govern MCP servers in Windsurf

Windsurf / Devin Desktop supports MCP marketplace discovery, manual configuration, one-click installation links, stdio, HTTP, and SSE transports, plus OAuth. A strong setup page must cover the transport and credential model, tool exposure, marketplace trust signals, and the team-level controls that may limit what users can install.

Setup path

How to approach this capability

1
Select a trusted marketplace or manually configure the server using the transport that matches the deployment model.
2
Authenticate through environment variables or supported OAuth, enable only the needed tools, and test the connection in the coding environment.

Distribution decision

Documented deep links can open a specific MCP registry entry for review and installation.

Governance and safety

Teams can restrict or allowlist MCP servers; tool count and permission scope should be managed deliberately.

First-party documentation

Model Context Protocol (MCP)
Source checked Aug 16, 2026