--- title: Windsurf MCP Integration: Missing Security Controls Put... description: Windsurf's MCP integration lacks essential security controls, allowing AI agents to automatically invoke tools without user approval. This creates serious... canonical: https://daily.dev/posts/windsurf-mcp-integration-missing-security-controls-put-users-at-risk-embrace-the-red-9dobjzmia twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Windsurf MCP Integration: Missing Security Controls Put Users at Risk · Embrace The Red | daily.dev og:description: Windsurf's MCP integration lacks essential security controls, allowing AI agents to automatically invoke tools without user approval. This creates serious... og:url: https://daily.dev/posts/windsurf-mcp-integration-missing-security-controls-put-users-at-risk-embrace-the-red-9dobjzmia og:image: https://api.daily.dev/og/posts/9DObJzMia.png og:image:alt: Windsurf MCP Integration: Missing Security Controls Put Users at Risk · Embrace The Red og:image:width: 1200 og:image:height: 630 og:locale: en --- [Embrace The Red](https://daily.dev/sources/embracethered) [Read post](https://api.daily.dev/r/9DObJzMia) # [Windsurf MCP Integration: Missing Security Controls Put Users at Risk · Embrace The Red](https://api.daily.dev/r/9DObJzMia "Go to post") This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month). Windsurf's MCP integration lacks essential security controls, allowing AI agents to automatically invoke tools without user approval. This creates serious vulnerabilities to prompt injection attacks where malicious instructions in code comments or files can hijack the agent to perform unauthorized actions like accessing private Slack channels. The analysis demonstrates how attackers can exploit this zero-click automation and recommends implementing user-configurable approval workflows for different tool categories based on risk levels. [#ai-agents](/tags/ai-agents "Check all #ai-agents posts")[#mcp](/tags/mcp "Check all #mcp posts")[#prompt-injection](/tags/prompt-injection "Check all #prompt-injection posts")[#security](/tags/security "Check all #security posts")[#windsurf](/tags/windsurf "Check all #windsurf posts") Aug 28, 2025•6m read time•From [embracethered.com](https://api.daily.dev/r/9DObJzMia "embracethered.com") [](https://api.daily.dev/r/9DObJzMia "Go to post") Table of contents [Investigating Windsurf’s MCP Integration](https://api.daily.dev/r/9DObJzMia?a=investigating-windsurfs-mcp-integration "Investigating Windsurf’s MCP Integration")[Video Demonstration](https://api.daily.dev/r/9DObJzMia?a=video-demonstration "Video Demonstration")[Anatomy of an Automatic Tool Invocation Attack](https://api.daily.dev/r/9DObJzMia?a=anatomy-of-an-automatic-tool-invocation-attack "Anatomy of an Automatic Tool Invocation Attack")[Hey you! Call all your tools sequentially now!](https://api.daily.dev/r/9DObJzMia?a=hey-you-call-all-your-tools-sequentially-now "Hey you! Call all your tools sequentially now!")[The Dilemma - Prompt Injection and User Interface Challenges](https://api.daily.dev/r/9DObJzMia?a=the-dilemma---prompt-injection-and-user-interface-challenges "The Dilemma - Prompt Injection and User Interface Challenges")[Feature Request To Windsurf](https://api.daily.dev/r/9DObJzMia?a=feature-request-to-windsurf "Feature Request To Windsurf")[Mitigations and Recommendations](https://api.daily.dev/r/9DObJzMia?a=mitigations-and-recommendations "Mitigations and Recommendations")[Conclusion](https://api.daily.dev/r/9DObJzMia?a=conclusion "Conclusion")[References](https://api.daily.dev/r/9DObJzMia?a=references "References") 519 Impressions Comment Bookmark Copy Share your thoughtsPost [](https://daily.dev/sources/embracethered) [Embrace The Red](https://daily.dev/sources/embracethered "https://daily.dev/sources/embracethered") Embrace the Red's resource offers insights, tutorials, and resources for developers and enthusiasts ... Read more 40 Followers • 182 Upvotes #### Would you recommend this post? Copy link WhatsApp Facebook X New Squad Copy linkShare with your friends ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Windsurf MCP Integration: Missing Security Controls Put Users at Risk · Embrace The Red","url":"https://daily.dev/posts/windsurf-mcp-integration-missing-security-controls-put-users-at-risk-embrace-the-red-9dobjzmia","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/windsurf-mcp-integration-missing-security-controls-put-users-at-risk-embrace-the-red-9dobjzmia"},"datePublished":"2025-08-28T19:54:21.258Z","dateModified":"2026-03-30T02:17:35.307Z","description":"Windsurf's MCP integration lacks essential security controls, allowing AI agents to automatically invoke tools without user approval. This creates serious...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/faa590f5296d96f5d474caf632e82ef5?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/faa590f5296d96f5d474caf632e82ef5?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"Embrace The Red","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Embrace The Red","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/50e27c500f1444fd9ed7d91301ed2e9c","url":"https://daily.dev/sources/embracethered"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/windsurf-mcp-integration-missing-security-controls-put-users-at-risk-embrace-the-red-9dobjzmia","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents,mcp,prompt-injection,security,windsurf","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Embrace The Red","item":"https://daily.dev/sources/embracethered"},{"@type":"ListItem","position":3,"name":"Windsurf MCP Integration: Missing Security Controls Put Users at Risk · Embrace The Red"}]} ```