One layer for the agents you run.
Surfil installs beside the coding agents you already run. Tools that route through it - CLIs and MCP - get cheaper, safer and remembered; editors like Cursor connect through MCP. All without changing how you work.
The agents Surfil connects to
Real compatibility - how Surfil connects to each. Open any one for where Surfil sits in that stack.
Claude Code
Between Claude Code and your model provider, on your device - one interception point, never a second proxy stacked into the path.
See how it connects →Cursor
At Cursor's MCP layer on your device: one endpoint for its MCP servers today, with full-traffic interception on the roadmap via the network layer.
See how it connects →Codex
One adapter under Codex, on your device - the same interception point every other agent uses, never a stacked second layer.
See how it connects →Copilot
Beside Copilot on your device: detected, with its MCP connected where a host exposes it. Its GitHub-proxied completions are not redirectable today.
See how it connects →MCP agents
In front of your MCP servers on your device, collapsing many endpoints into one interception point you can meter and govern.
See how it connects →Every AI tool Surfil recognises (30)
Run `surfil doctor` on your machine to see which of these you have and how each connects. Detection is local and read-only - nothing about your tools leaves your device. Each label is the real mechanism, never an over-claim.
Fully auto-connected
1Base-URL and MCP wired reversibly on install.
Connected via MCP
4Surfil's MCP server plugs into their config on install.
Routed via environment
10Honour the standard provider env vars - the shell profile routes them.
Detected
15Recognised on your machine; connect manually for now.
Cloud-only, recognised but not locally interceptable: Devin, Replit Agent, v0, Bolt.new, Lovable, Google Jules, GitHub Copilot Workspace.
Under your stack, not in your way
Byte-exact passthrough
Surfil preserves provider prefix hashes exactly, so your prefix cache keeps working - asserted in CI.
One layer, not many
Every product (Cap, Guard, Mind…) is a stage on the same pipeline - never a second interception point.
Zero config lock-in
A clean uninstall restores every agent config byte-for-byte. Nothing to unwind.
Add Surfil to every agent
One install beside Claude Code, Cursor, Codex and Copilot. Nothing leaves your device.