01
Cascade has a total enabled-tool limit, so disable unused tools or servers instead of exposing everything at once.
Connect Windsurf Cascade to Doco by adding the stdio package to its MCP settings or raw mcp_config.json. Cascade then discovers Doco's tools for structured, version-protected knowledge work.
Windsurf supports stdio, Streamable HTTP, and SSE. This guide uses local stdio so Doco's device login and CLI configuration stay on your machine.
Open Windsurf Settings → Cascade → MCP Servers, or edit ~/.codeium/windsurf/mcp_config.json and reload the server.
Official client docs{
"mcpServers": {
"doco": {
"command": "npx",
"args": ["-y", "--package", "doco-agent-cli", "doco", "mcp"]
}
}
}Run doco login and keep the resulting credential in the local Doco config.
Add the doco server to Windsurf MCP settings or the raw configuration file.
Open the MCP panel, enable only the Doco tools needed for the task, and verify connection state.
Ask Cascade to search and cite a block; test a protected write only after the read path is correct.
The MCP process runs with your user permissions and Doco token. Review the command, expose only the intended workspace, and grant write scope only after read-only acceptance succeeds.
Cascade has a total enabled-tool limit, so disable unused tools or servers instead of exposing everything at once.
Keep approval controls on for writes; a successful connection is not permission to mutate arbitrary documents.
Use environment interpolation for any headless credential and never put a literal token in shared JSON.
doco_search_v2doco_outlinedoco_readdoco_patch_blockdoco_batch_editdoco_changesWindsurf can launch Doco as a standard local MCP server. The main operational choice is tool discipline: expose the small set needed for the current workflow and retain write confirmations.
The raw configuration is ~/.codeium/windsurf/mcp_config.json, and the same settings are accessible from the Cascade MCP panel.
Windsurf supports Streamable HTTP, but Doco's remote endpoint currently uses caller-provided API tokens. The local stdio path is simpler for browser device login.
A smaller active tool set reduces ambiguity and keeps the permission boundary visible. Enable writes only for workflows that require them.