Set up AI-Surface in Claude Desktop

communitystdiounknown

Find and govern AI attack surfaces in application code at PR time. Free, OSS, runs offline.

01Configuration

{
  "mcpServers": {
    "ai-surface": {
      "command": "uvx",
      "args": [
        "--from",
        "apisec-ai-surface",
        "ai-surface"
      ]
    }
  }
}

Add this to claude_desktop_config.json. Generated from the captured install method (uvx); the mcpServers shape is shared across Claude Desktop, Cursor, Windsurf, Cline, and VS Code.

02Steps

Make sure Claude Desktop is installed and up to date.
Open claude_desktop_config.json and add the block above (merge into any existing mcpServers).
Provide any required API keys/credentials as environment variables.
Restart Claude Desktop and confirm AI-Surface’s tools appear.

03Other runtimes

Cursor Windsurf Cline Continue Goose VS Code OpenAI Agents SDK LangGraph CrewAI

04Provenance

config_sourcegenerated from captured install method

last_checked2026-08-18 09:31Z

sourcesGitHub repo search [p4]

Next step

Want agents that act within guardrails? Apex is the live governed-agent product — paced, capped, and fully-logged actions with approvals before anything runs.

Explore Apex →

See also: server page · is it safe? · alternatives