Connect Windsurf to AWS

One line gives Windsurf your AWS account as tools: 5 endpoints, s3, send email, lambda, called with your own connection. No key in the prompt, a receipt for every call, revoke Windsurf's access alone any time.

Get the line for Windsurf Connect AWS first

Three steps

Create a free 0n3 account and connect AWS. Paste a key or sign in; it lands in your vault, encrypted.
Install 0n3 into Windsurf. The mcp_config.json block.
Ask Windsurf: whoami. Then: "List customers in AWS".

Write it yourself · ~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "0n3": {
      "serverUrl": "https://0n3.app/mcp",
      "headers": {
        "Authorization": "Bearer <your 0n token>"
      }
    }
  }
}

The line above carries a placeholder; 0n3.app/install mints a real key named for Windsurf and fills it in.