How to add Maven Dependencies MCP Server to Windsurf

Check Maven dependency versions and look up the latest releases from Maven Central in real time. Paste the config into ~/.codeium/windsurf/mcp_config.json and restart Windsurf.

Last updated June 14, 2026 · 33★ · stdio · no auth

Windsurf config for Maven Dependencies MCP Server

npm install -g mcp-maven-deps

{
  "mcpServers": {
    "maven-dependencies-mcp-server": {
      "command": "npx",
      "args": [
        "mcp-maven-deps"
      ]
    }
  }
}

Setup steps

1Open Windsurf → Cascade → the hammer/MCP icon → Configure (or edit ~/.codeium/windsurf/mcp_config.json).
2Paste the Maven Dependencies MCP Server config below.
3Fill in placeholder secrets, then save.
4Click Refresh in the MCP panel.
5Maven Dependencies MCP Server's tools become available to Cascade.

Before you start

Node.js with npm/npx
Internet access to Maven Central (repo1.maven.org)

What Maven Dependencies MCP Server can do in Windsurf

get_latest_release

Retrieves the latest stable release version of a Maven dependency. Excludes pre-release versions (alpha, beta, milestone, RC, snapshot) by default; set excludePreReleases=false to include them. Accepts a Maven coordinate string (groupId:artifactId[:version][:packaging][:classifier]).

check_maven_version_exists

Checks if a specific version of a Maven dependency exists. The version can be provided either inside the dependency string or as a separate version parameter. Returns a boolean result.

list_maven_versions

Lists Maven dependency versions in deploy order (most recent first), one per line, with optional pre-release filtering (excludePreReleases, default true) and depth control (depth, default 15, max 100).

Security

SSE transport can be bound to a remote host with --host=0.0.0.0, exposing the server over HTTP without authentication. Only do this on trusted networks.

Maven Dependencies MCP Server + Windsurf FAQ

Where is the Windsurf config file?

Windsurf reads MCP servers from ~/.codeium/windsurf/mcp_config.json. Paste the Maven Dependencies MCP Server config there under the "mcpServers" key and restart the client.

Is Maven Dependencies MCP Server safe to use with Windsurf?

SSE transport can be bound to a remote host with --host=0.0.0.0, exposing the server over HTTP without authentication. Only do this on trusted networks.

Where does the version data come from?

The server queries maven-metadata.xml directly on Maven Central (https://repo1.maven.org/maven2/<g>/<a>/maven-metadata.xml), the authoritative file Maven and Gradle consult during dependency resolution. It updates within seconds of a deploy, so results are never stale.

Are pre-release versions included by default?

No. By default tools exclude pre-releases (alpha, beta, milestone, RC, snapshot) so you get production-ready versions. Set excludePreReleases=false to include them.

Does it support transports other than stdio?

Yes. In addition to stdio (the default), it supports SSE (Server-Sent Events) over HTTP. You can run it with --port and optionally --host=0.0.0.0 for remote access.

View repo Full Maven Dependencies MCP Server page