Guides / Connect an AI client

Connect Windsurf to Zorlya

Add Zorlya to Windsurf's Cascade through mcp_config.json using a serverUrl, then sign in on Zorlya's Connect page. Docs are thin on OAuth.

3 min read. Updated .

Upload your resume

To connect Windsurf to Zorlya, add a serverUrl of https://mcp.zorlya.com to mcp_config.json and sign in on Zorlya’s Connect page. Windsurf is not on Zorlya’s list of AI apps and its documentation says little about OAuth, so the connection may fail. We have not tried it.

Not on Zorlya’s list yet. Zorlya accepts only the AI apps on its list: Claude, ChatGPT, Claude Code and Cursor (how it works). Windsurf is not on it, so Zorlya refuses its registration unless Windsurf sends you back to an address that a listed app uses. We have not tried it. The steps below are what Windsurf’s own documentation describes for a remote server.

What you need

  • An approved Zorlya account. A job seeker account needs the Pro plan, because AI client access is part of Pro.
  • Windsurf with Cascade.
  • The server URL: https://mcp.zorlya.com

Steps

  1. Open the config file. The docs say to click the ... (Actions) menu at the top right of the Cascade panel, then click the “Open MCP config file” icon in the MCPs section. The file is mcp_config.json. On macOS and Linux the docs give ~/.config/devin/mcp_config.json, and on Windows %APPDATA%\devin\mcp_config.json.
  2. Add Zorlya under mcpServers. Remote HTTP servers use a serverUrl or url field:
{
  "mcpServers": {
    "zorlya": {
      "serverUrl": "https://mcp.zorlya.com"
    }
  }
}
  1. Save. In the MCPs section of the ... menu, use the toggle next to the server to turn it on.
  2. If a browser window opens, choose the account and permission level on Zorlya’s Connect page and sign in. Read only is the default. Write tools appear only with Read and change.

Do not add headers. Zorlya has no API keys.

What you should see

Zorlya listed in the MCPs section with its tools. A job seeker account has 15 read tools, plus 5 write tools with Read and change. The docs say individual tools can be turned off with a disabledTools array.

Try it

  • “Use Zorlya top_matches and tell me which of my top five jobs pays best.”
  • “Run search_jobs for remote platform roles and read the zorlya://profile resource to check the fit.”

If it does not connect

  1. No sign-in window appears. The docs say OAuth is supported for each transport type, but they do not describe the sign-in steps. Zorlya requires OAuth, so a client that never starts it cannot connect. Update Windsurf and retry.
  2. A redirect address Zorlya refuses. The docs do not say which redirect address Windsurf uses. Zorlya accepts only the return addresses of the AI apps on its list and refuses anything else, including custom schemes such as app://callback. If the sign-in fails at registration, this is the likely cause.
  3. Your team blocks the server. On Teams and Enterprise, the docs say that once an admin allowlists even one server, all others are blocked, and the Server ID must match the key name in mcp_config.json exactly (here zorlya), case-sensitive. Enterprise users also have to turn MCP on in settings.

What we checked

The steps come from the Windsurf MCP page as redirected to Devin’s documentation, read on 2026-10-17. We did not try the connection to Zorlya in Windsurf. The OAuth redirect address and sign-in steps are not in that page, so this guide does not promise they work.

More on the server: developers.

Sources