Windsurf
Codeium's agent-first IDE (formerly Codeium Editor). Cascade mode with MCP support, plus built-in memory and a generous free tier.
Delv Safety Grade: B
Score 72/100 · assessed 2026-04-19
Windsurf is Codeium's agent-first IDE with MCP support, backed by a well-funded company (Exafunction Inc) with significant VC backing and enterprise customers. The maintainer score is strong given Codeium's established presence in AI coding tools. However, transparency is limited: there's no public repository for the IDE itself, making independent security review impossible. The permissions model is concerning for an agent-first tool that can autonomously edit multiple files and execute code across your entire workspace. Supply chain is reasonable via standard installers but lacks the verifiability of open source. MCP integration is recent (late 2024) and partial, supporting tools and resources but not prompts or sampling. No known security incidents, but the closed-source nature and broad filesystem access warrant caution with sensitive codebases.
Green flags
- Codeium is established vendor with enterprise customers and VC backing
- Standard installer distribution via official website (not sideload)
- Active documentation and support channels
- Generous free tier reduces pressure for rushed security decisions
- No known security incidents or credential leaks to date
Red flags
- No public repository - closed source IDE cannot be independently audited
- Agent-first design means autonomous multi-file edits without per-action approval
- Broad filesystem access across entire workspace, not scoped to project
- Relatively new MCP implementation (late 2024) with incomplete feature support
Permissions requested
MCP capabilities
- Tools
- Resources
- Prompts
- Sampling
Platforms
Config location
~/.codeium/windsurf/mcp_config.json
Review
Best choice if you want an agent-first IDE with MCP support and don't want to pay Cursor prices. The free tier is good enough to use daily. Skip it if you need full MCP feature parity or prefer a minimal editor.
Good at
- Cascade mode handles multi-file refactoring without constant supervision
- Built-in memory persists context across sessions
- Generous free tier with unlimited basic completions
- MCP config follows standard schema, easy to port from other clients
- Cross-platform with native performance
Watch out
- MCP prompts and sampling not yet supported
- UI can lag during complex Cascade planning
- MCP config requires manual JSON editing
- VS Code fork means some extension compatibility issues
- Error messages from MCP servers could be clearer