# Connect Windsurf (Devin Desktop) to aicharged.io

> Windsurf is now Devin Desktop: its Cascade agent reads mcp_config.json with serverUrl — mind the limit of 100 tools.

## At a glance

| Kind | Sign-in | Platforms | Status | Verified |
|---|---|---|---|---|
| Editors & IDEs | API key (Bearer), OAuth sign-in | macOS, Linux, Windows | works today | 2026-10-22 |

- MCP: `https://aicharged.io/api/v1/mcp`
- Docs: https://docs.devin.ai/desktop/cascade/mcp

## Recipe

Config file (`~/.config/devin/mcp_config.json`):

```json
{
  "mcpServers": {
    "aicharged": {
      "serverUrl": "https://aicharged.io/api/v1/mcp",
      "headers": {
        "Authorization": "Bearer ${env:AICHARGED_API_KEY}"
      }
    }
  }
}
```

Cascade uses at most 100 tools at a time and aicharged.io has more — list the ones you do not need in the server's disabledTools array. Windows: %APPDATA%\devin\mcp_config.json. Unverified: the older Windsurf path ~/.codeium/windsurf/mcp_config.json.

Config with the key inline (`~/.config/devin/mcp_config.json`):

```json
{
  "mcpServers": {
    "aicharged": {
      "serverUrl": "https://aicharged.io/api/v1/mcp",
      "headers": {
        "Authorization": "Bearer <API_KEY>"
      }
    }
  }
}
```

[Client documentation](https://docs.devin.ai/desktop/cascade/mcp)

## Authentication

- Send `Authorization: Bearer <API_KEY>` with every request. Create a key at https://aicharged.io/admin/account/api-keys.
- OAuth 2.1 (PKCE S256) is available for clients that cannot send a static key (ChatGPT).
- Without a key the endpoint answers 401 with a WWW-Authenticate header that points to https://aicharged.io/.well-known/oauth-protected-resource.

All 51 clients: https://aicharged.io/connect.md

HTML version: https://aicharged.io/connect/windsurf