Hub/AI Security/Windsurf / Devin Desktop
Windsurf / Devin Desktop
Cognition · Official site
6 Yes0 Partial0 No4 Unknown
| Feature | Status | Notes | Source | Checked |
|---|---|---|---|---|
| Tool-call approval prompts | Yes | Prompts before any MCP tool call by default | Source | 2026-11-04 |
| Per-tool allow / deny | Yes | Terminal allow / deny rules; per-tool MCP approval | Source | 2026-11-04 |
| Sandboxing | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| OAuth for remote MCP | Yes | OAuth supported for remote servers | Source | 2026-11-04 |
| Verified marketplace listings | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Auto-install / auto-update control | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Admin allowlists | Yes | Admin MCP allowlist and private registries | Source | 2026-11-04 |
| Audit logs | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Data retention / training opt-out | Yes | Opt-out means no training plus zero data retention; admin-enforced on Teams | Source | 2026-11-04 |
| Security disclosure page | Yes | Vulnerability disclosure via security@cognition.ai | Source | 2026-11-04 |
Across the hub
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.