Surfil
// integration

Surfil sits under Claude Code, byte-exact

Surfil installs beside Claude Code and consolidates its MCP servers into one interception point - cheaper, safer and remembered, with no config rewrite and no change to how you invoke it.

Install for Claude CodeAll integrations →
surfil · where it sits in your stack
Claude CodeCursorCodexCopilotMCP
↓ one adapter each
◈ Surfil interception layer
↓ byte-exact passthrough
your provider / model
Where it sits

One layer in your stack

Between Claude Code and your model provider, on your device - one interception point, never a second proxy stacked into the path.

youClaude Code + its MCP servers
↓
surfilSurfil · one on-device interception point
↓
providerModel provider · byte-exact passthrough
ⓘ One interception point, on your device. Surfil never chains a second proxy in front of Claude Code, and passthrough to the provider is byte-exact.
What you get

What you get

Consolidate MCP

Scattered MCP servers collapse into one endpoint, so less repeated context ships on every call.

Guard the calls

Every tool call is screened on-device before it runs, with secrets and injection caught pre-flight.

Carry memory

Mind gives Claude Code local memory with provenance that follows you across your other agents too.

Setup

Add Surfil to Claude Code

Three steps, no config rewrite, reversible byte-for-byte.

1Install Surfil; it detects Claude Code and wires in without touching your existing config.
2Run one normal week - the Cap ledger measures recoverable spend and signs the first receipt.
3Flip Guard from monitor to enforce once the would-have-blocked report looks right for you.
Install for Claude CodeRead the docs →
What holds

Why it fits Claude Code

No config rewrite

Surfil consolidates the MCP servers Claude Code already uses; your existing setup is left intact.

Prefix cache preserved

Passthrough keeps the provider prefix hash byte-exact, so Claude Code's cache keeps hitting.

Reversible byte-for-byte

A clean uninstall restores every Claude Code config exactly, so backing out costs you nothing.

Works with

Every agent, the same layer

One adapter per agent, all on the same on-device interception point.

Cursor

At Cursor's MCP layer on your device: one endpoint for its MCP servers today, with full-traffic interception on the roadmap via the network layer.

See adapter →

Codex

One adapter under Codex, on your device - the same interception point every other agent uses, never a stacked second layer.

See adapter →

Copilot

Beside Copilot on your device: detected, with its MCP connected where a host exposes it. Its GitHub-proxied completions are not redirectable today.

See adapter →

MCP agents

In front of your MCP servers on your device, collapsing many endpoints into one interception point you can meter and govern.

See adapter →

Add Surfil to Claude Code

Core installs beside the agents you already run, byte-exact, and the first signed receipt arrives after one normal week of traffic.

Install for Claude CodeAll integrations