Verify email in Windsurf
Windsurf is now Devin Desktop, and its agent is Devin Local - Cascade was removed in September 2026, so anything written around a Cascade panel is out of date. Add the Qualisend endpoint through the Devin CLI and the agent can verify addresses and clean lists as it works.
- MCP endpoint
- https://app.qualisend.com/api/mcp
- Authentication
- Sign-in or API key
- Available on
- All plans. Enterprise tenants need an admin to enable MCP in settings first, and team admins can allowlist which servers are permitted. Usage is metered on the tokens each request spends against your plan quota, not per tool call.
Connect it to Windsurf
You need a Qualisend account - the free plan includes 100 verification credits that never expire - and Windsurf itself. Steps checked against Cognition's documentation in September 2026.
- 1
Add the server
From the repo you want it in. The default scope writes .devin/mcp_config.local.json, which is gitignored - so a key you add later stays out of the repo.
devin mcp add qualisend https://app.qualisend.com/api/mcp - 2
Pick a wider scope if you want one
-s project writes .devin/mcp_config.json and shares it with your team through version control. -s user writes ~/.config/devin/mcp_config.json and applies to all your projects.
devin mcp add -s user qualisend https://app.qualisend.com/api/mcp - 3
Sign in, or add a key
For sign-in, run the login command and approve in the browser. For a static credential instead, add the headers block from the config below to whichever file you wrote.
devin mcp login qualisend - 4
Check it
Ask Devin Local something that needs the tools. If it cannot see them, confirm you edited the file for the scope you actually wrote - the three can shadow each other.
Sign-in or API key
Either. Add the server with no credentials and run devin mcp login qualisend to authorize in the browser (tokens refresh on their own), or put a Qualisend API key in the headers block.
Check that it worked
Ask "how many Qualisend credits do I have left?". A number back means you are connected - that tool is free, so it costs nothing to test.
Config file
.devin/mcp_config.local.json (default, gitignored) · .devin/mcp_config.json (shared) · ~/.config/devin/mcp_config.json (all projects; %APPDATA%\devin\mcp_config.json on Windows)The same block works in all three files - they only differ in how far it reaches. Keep a literal key in the .local.json one, or use ${env:QUALISEND_API_KEY} and export it instead.
{
"mcpServers": {
"qualisend": {
"url": "https://app.qualisend.com/api/mcp",
"transport": "http",
"headers": {
"Authorization": "Bearer ${env:QUALISEND_API_KEY}"
}
}
}
}Worth knowing
- Cascade is gone. It was removed from Devin Desktop in September 2026 and Devin Local is the only agent now, so a guide that tells you to open a Cascade panel or edit mcp_config.json from its Actions menu no longer applies - and parts of Cognition's own docs still read that way.
- The root key is mcpServers and the URL field is url. Older Windsurf material uses serverUrl; Devin Local only documents url.
- Three scopes can shadow each other. devin mcp add defaults to .devin/mcp_config.local.json, so if you hand-edited the user file and nothing changed, check the local one first.
- The rename did not retire ~/.codeium/. Those paths are unchanged and still hold other settings - the MCP config is the part that moved.
What to ask once it is connected
There are no commands to learn. Ask in your own words and Windsurf picks the right tool - there are twelve, covering verification, sending-domain deliverability and blacklist checks.
What Windsurf can reach
Only the verification tools, scoped to the single workspace you connect. It cannot reach another customer's data, your billing, or any admin function, and it never sees how a check is performed - just the verdict and the score. Authentication is an explicit token in a request header, never a cookie, so there is no session for a malicious page to borrow. Revoke it from Windsurf or from your Qualisend dashboard at any time; sign-in access also expires on its own within an hour. Full detail is on the MCP documentation page.
Windsurf FAQ
Cognition's own reference: Devin MCP configuration docs
Using something else?
It is the same endpoint everywhere. Pick your client:
Any other MCP-compatible client works too - Cline, JetBrains AI Assistant and the rest all take the same Streamable HTTP endpoint. The MCP documentation has the transport and authentication details.
Start free with 100 credits that never expire, then paste the endpoint.