Runlayer Plugin
Unified endpoint
Add one remote MCP endpoint. Users discover and authorize the approved tools available to them without accumulating separate client configurations.
Runlayer for Windsurf
Provide Windsurf with managed MCP access, configuration sync, session telemetry, and pre-tool enforcement.
01
Connect
Give everyone in Windsurf the golden path to approved tools
Add one Runlayer Plugin endpoint so people find every tool they’re approved for, or connect a single server when you want a narrower set.
Direct connection
Per-connector endpoint
Give the client a dedicated Runlayer URL for one connector. Identity, policy, scanning, and audit still stay attached to every request.
Connection support
Remote MCP and local MCP
02
Observe
See how Windsurf is being used
Runlayer uses every channel Windsurf exposes. Each one is labeled, so you can tell real-time hooks from after-the-fact imports.
Client hooks
Capture supported prompts, reasoning, local and MCP tool calls, responses, and scanner decisions in real time.
Read the guide03
Enforce
Know exactly what Windsurf can block
Each row reflects Runlayer’s enforcement code for Windsurf: what it can stop before a call runs, block afterward, or redact in place.
| Control | Support | What that means |
|---|---|---|
| Pre-tool deny | Supported | Runlayer can deny a tool call before Windsurf runs it. |
| Post-tool output block | Unsupported | Windsurf ignores Runlayer after a tool runs, so Runlayer cannot block its output. |
| Output rewrite | Unsupported | Windsurf has no way to receive replacement output, so Runlayer cannot mask it. |
Enforcement postureManaged device
Minimum supported version1.12.31
Client-specific caveats
- When Runlayer denies a call, Windsurf shows the reason to the user; Runlayer cannot adjust the call’s inputs.
- Runlayer can stop MCP calls, shell commands, and file reads before they run; everything after a tool runs is monitoring only.
04
Deploy at scale
Roll out Windsurf controls with the tools IT already uses
Admins can deploy the Runlayer CLI and endpoint package through MDM, then keep approved MCP configuration in sync automatically.
macOSmacOSWindows and macOS
SimpleMDM
Open deployment guide →
Jamf Pro
Open deployment guide →
Microsoft Intune
Open deployment guide →
One signed package, settings managed centrally
Runlayer’s endpoint package installs on managed macOS and Windows devices. It discovers shadow AI, keeps hooks in place, captures sessions, and applies runtime controls. Approved MCP configuration re-syncs on a schedule for supported clients.
MCP servers
Connect Windsurf to the tools your teams use
Setup steps, tools, and controls for each MCP server in Windsurf.
