Surface MCP Server

Model Context Protocol server for Surface. Gives any MCP-compatible AI assistant (Claude, etc.) the ability to scan files, manage accounts, and access SDK/API documentation.

Install

npx -y github:tendrl-inc-labs/surface-mcp

npm clones this repository and builds it from source on install, so there is nothing to publish and nothing stale to serve.

Install by repository, not by name: an unrelated third party owns the name surface-mcp on npm, and installing that name runs their code.

In an MCP client config:

{
  "mcpServers": {
    "surface": {
      "command": "npx",
      "args": ["-y", "github:tendrl-inc-labs/surface-mcp"],
      "env": {
        "SURFACE_KEY": "${SURFACE_KEY}"
      }
    }
  }
}

Related MCP server: AgentAudit

Build from source

git clone https://github.com/tendrl-inc-labs/surface-mcp
cd surface-mcp
npm install
npm run build

Configuration

Set your API key:

export SURFACE_KEY="sfk_your_token_here"

Optional: Local Scanner

Point SURFACE_SCANNER_PATH at the Surface scanner binary to scan files locally. Files never leave your machine — the binary runs on your hardware and reports results to the server.

export SURFACE_SCANNER_PATH="/usr/local/bin/surface-scanner"

When this is not set, scan_file uploads to the API instead.

Optional: Custom API URL

Set a custom base URL (defaults to https://app.tendrl.com/surface):

export SURFACE_BASE_URL="http://localhost:9080/api"

Usage with Claude Desktop

Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):

{
  "mcpServers": {
    "surface": {
      "command": "node",
      "args": ["/path/to/surface/mcp-server/dist/index.js"],
      "env": {
        "SURFACE_KEY": "sfk_your_token_here"
      }
    }
  }
}

With local scanner (files never leave your machine):

{
  "mcpServers": {
    "surface": {
      "command": "node",
      "args": ["/path/to/surface/mcp-server/dist/index.js"],
      "env": {
        "SURFACE_KEY": "sfk_your_token_here",
        "SURFACE_SCANNER_PATH": "/usr/local/bin/surface-scanner"
      }
    }
  }
}

Usage with Claude Code

Add to your Claude Code settings:

# API mode (uploads to server)
claude mcp add surface node /path/to/surface/mcp-server/dist/index.js -e SURFACE_KEY=sfk_your_token_here

# Local scanner mode (files stay on your machine)
claude mcp add surface node /path/to/surface/mcp-server/dist/index.js -e SURFACE_KEY=sfk_your_token_here -e SURFACE_SCANNER_PATH=/usr/local/bin/surface-scanner

Tools

Resources

Agentic Security

The scan_payload tool is designed for AI agent workflows. When an agent scans a payload, Surface automatically detects:

• Prompt injection — jailbreak attempts, role hijacking, instruction overrides

• SQL injection — union attacks, tautology auth bypass, blind injection

• XSS injection — script tags, event handlers, javascript: URIs

• Credential exposure — API keys, tokens, private keys, connection strings

• Malicious code — reverse shells, download cradles, eval/exec chains

• Suspicious tool calls — dangerous execute/write/http operations

• Known malicious URLs — checked against threat intelligence feeds

Results include promptInjection, codeExtraction, sensitiveData, and toolCallAnalysis fields with detailed findings.

Prompts