Let Windsurf audit and fix your website

1. 1

   Install the squirrelscan CLI

   Run it from Windsurf's terminal. Signed out, local audits are free and don't need an account.

   bash

   curl -fsSL https://install.squirrelscan.com | bash

2. 2

   Ask Cascade to audit a site

   The llm format is compact and structured, so Cascade can work from it directly without you summarizing the report first.

   bash

   squirrel audit https://example.com --format llm

   squirrel audit options
3. 3

   Or hand Cascade a report you already ran

   If you'd rather run the audit yourself and pass the results over, write the report to a file in your project and point Cascade at it. Any stored audit can be re-exported this way without re-crawling the site.

   bash

   squirrel report <audit-id> --format llm > audit.md

   squirrel report options

1. 1

   For cloud audits, add the hosted MCP server

   Paste this into your mcp_config.json (see above for where that file lives and how to reload it), then refresh the MCP panel and finish the OAuth sign-in that opens in your browser. For a shared or headless setup, send a bearer API key header instead of using OAuth.

   json

   {
     "mcpServers": {
       "squirrelscan": {
         "serverUrl": "https://mcp.squirrelscan.com/mcp"
       }
     }
   }

   MCP client setup for Windsurf

Frequently asked questions

Is squirrelscan free to use in Windsurf?

Signed out, local audits are free and need no account: the squirrel CLI runs on your machine and audits any URL. Signed in, every audit spends pay-as-you-go credits (50 per audit plus 2 per audited page), and the hosted MCP server adds cloud audits with browser rendering, shareable reports, and a per-website issue tracker. Every account gets 500 free credits every month.Credits and pricing

How do I get Cascade to fix my site's SEO?

Give it the report. Run an audit in the llm output format, or export a stored report to a file in your project, and Cascade reads the findings, maps them to files in your project, and edits the code. Re-audit afterwards to confirm each fix landed.Fix your site with an agent

Can I audit localhost or a staging site from Windsurf?

Yes, with the CLI. It audits anything your machine can reach, including localhost and private staging URLs. The hosted MCP server crawls from squirrelscan's cloud, so it needs a publicly reachable URL; for private networks use the CLI or the local squirrel mcp server.

Do I need an account or API key to connect the MCP server?

Not for local CLI audits, which need neither. To connect the hosted MCP server you sign in once: point the config at the server with no auth header and Windsurf runs an OAuth browser flow, or set a bearer API key header instead for shared or headless setups.

Can it audit my site on every deploy?

Yes, but from CI rather than the editor. Add a squirrel audit step with a fail-on threshold and the build fails on a regression (exit code 2), or turn on scheduled cloud audits from the dashboard: free re-audits one site weekly, Pro re-audits every site daily.CI gating guide

Is Windsurf still Windsurf, or is it Devin Desktop now?

Cognition rebranded Windsurf as Devin Desktop in 2026, and the Cascade agent is folding into the Devin brand as Devin Local. The config file paths (~/.codeium/windsurf/mcp_config.json) and MCP JSON keys are unchanged, so this setup works whichever name your install shows.