MCP Directory

How to add Maven Tools MCP Server to Windsurf

Maven Central dependency intelligence for JVM build tools: versions, upgrades, CVEs, licenses, and POM-aware analysis. Paste the config into ~/.codeium/windsurf/mcp_config.json and restart Windsurf.

Last updated June 14, 2026 · 27★ · stdio · no auth

Windsurf config for Maven Tools MCP Server

docker run -i --rm arvindand/maven-tools-mcp:latest
{
  "mcpServers": {
    "maven-tools-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "arvindand/maven-tools-mcp:latest"
      ]
    }
  }
}

Requires Docker to be installed and running.

Setup steps

  1. 1Open Windsurf → Cascade → the hammer/MCP icon → Configure (or edit ~/.codeium/windsurf/mcp_config.json).
  2. 2Paste the Maven Tools MCP Server config below.
  3. 3Fill in placeholder secrets, then save.
  4. 4Click Refresh in the MCP panel.
  5. 5Maven Tools MCP Server's tools become available to Cascade.

Before you start

  • Docker
  • An MCP-capable client (Claude Desktop, VS Code + GitHub Copilot, Cursor, etc.)

What Maven Tools MCP Server can do in Windsurf

get_latest_version

Find the latest version of a dependency with stability-aware selection.

check_version_exists

Verify that a specific version exists and classify its stability.

check_multiple_dependencies

Bulk lookup for multiple dependency coordinates.

compare_dependency_versions

Compare current versions against available upgrades.

analyze_dependency_age

Classify how old a dependency is.

analyze_release_patterns

Examine release cadence and maintenance signals.

analyze_project_health

Run a broader dependency health audit.

analyze_pom_dependencies

POM-aware: resolve effective versions from raw pom.xml, classify each dep as EXPLICIT / MANAGED / EXPLICIT_OVERRIDE, surface multi-BOM conflicts and the managing BOM coordinate.

Security

Runs locally via Docker over stdio; no authentication required. Uncached queries need network access to Maven Central. Context7 documentation tools are optional and can be disabled via the :latest-noc7 image; CONTEXT7_API_KEY is optional and passed with -e CONTEXT7_API_KEY if needed. Custom CA certificate support is available for locked-down corporate networks.

Maven Tools MCP Server + Windsurf FAQ

Where is the Windsurf config file?

Windsurf reads MCP servers from ~/.codeium/windsurf/mcp_config.json. Paste the Maven Tools MCP Server config there under the "mcpServers" key and restart the client.

Is Maven Tools MCP Server safe to use with Windsurf?

Runs locally via Docker over stdio; no authentication required. Uncached queries need network access to Maven Central. Context7 documentation tools are optional and can be disabled via the :latest-noc7 image; CONTEXT7_API_KEY is optional and passed with -e CONTEXT7_API_KEY if needed. Custom CA certificate support is available for locked-down corporate networks.

Does this replace Renovate or Dependabot?

For Maven Central-based JVM projects it can. Maven Tools MCP is the dependency intelligence layer, and the replacement behavior comes from an agent workflow built on top of it (e.g., the repository's own weekly self-update flow that opens reviewable PRs for safe minor/patch upgrades).

Does it work offline?

Not fully. Uncached queries need network access to Maven Central.

Does it work for Gradle or other JVM build tools?

Yes, as long as the project depends on libraries resolved through Maven Central coordinates. The inputs are standard Maven coordinates, so the same data applies to Maven, Gradle, SBT, and Mill.

View repo Full Maven Tools MCP Server page