Windsurf

Codeium's AI-powered editor with MCP server support via Cascade.

Local (stdio)

Prerequisites

A Bipa account with an active registration.
Windsurf editor installed.
bipa CLI installed. Prefer the managed installer: curl -fsSL https://agents.bipa.app/install.sh | sh. Developer package-manager installs are listed in the docs.
Run bipa login --web --open to authenticate before configuring. Use --web alone to get the URL without auto-opening the browser.

Setup

Open Windsurf MCP settings

Go to Windsurf Settings → Cascade → MCP Servers and click Add Server. Or open the Command Palette (Cmd+Shift+P) and search for "MCP". The config file is located at ~/.codeium/windsurf/mcp_config.json.

Add the Bipa Agents server

Add the following to the mcpServers object in the config file:

{
  "mcpServers": {
    "bipa": {
      "command": "bipa",
      "args": ["mcp", "serve", "--stdio"]
    }
  }
}

Reload and verify

Save the config file and reload the window. The Bipa Agents tools will be available in Cascade conversations.

Use Cascade (the AI assistant) to interact with the MCP tools. You can also browse the MCP Marketplace via the MCPs icon in the Cascade panel.

Available MCP Tools

Once connected, the following tools become available to the AI assistant:

bipa_pix_pay_key

Pay for any service or API

bipa_balance

Check all wallet balances

bipa_history

Transaction history

bipa_deposit

Get deposit addresses

bipa_pix_keys

List Pix keys

bipa_pix_brcode_decode

Decode a Pix BR Code

bipa_limits

Check spending limits

bipa_account

Account profile

bipa_whoami

Current session info

bipa_ln_pay

Pay Lightning invoice

bipa_card_create

Create virtual Mastercard

How Authentication Works

Local mode: The CLI authenticates by opening your browser. You sign in with the Bipa app and the session token is stored locally.

Remote mode: The MCP client handles OAuth 2.1 automatically. It discovers endpoints via /.well-known/oauth-authorization-server, redirects you to the Bipa app for authorization, and exchanges the code for an access token using PKCE.