Surfil：面向 AI 编程 Agent 的本地设备控制平面
英文标题：🔶 Surfil On-device control plane for AI coding agents
Surfil 宣布提供一个运行在本地设备上的控制平面，可与 Claude Code、Cursor、Codex、Copilot 及 MCP Agent 协同工作，主打降低成本、提升安全性并保留跨会话记忆。该产品通过单一、字节级精确的拦截层处理 Agent 流量，称不会破坏现有提供商的 Prompt Cache，且源代码不会离开设备。Surfil 的节省数据和价值输出均可生成 Ed25519 签名回执，开发者可在离线、无需账号的情况下通过 `surfil verify` 验证。其商业模式为 Agent 执行不限量计费，但对服务器签名的价值输出按 Credit 计量。
153.1 KB
中文
// 面向 AI 编程 Agent 的本地设备控制平面
一次安装。更便宜、更安全，也能记住。
Surfil 运行在 Claude Code、Cursor、Codex 和 Copilot 身边。经由它路由的工具会变得更便宜、更安全；Cursor 等编辑器则通过 MCP 连接——每一项声明均以签名证明，你的源代码绝不会离开本机。
______surfil · 你的控制平面
✓rcpt_8f2aepoch 7 · 离线VALID
!负载中的 AWS 密钥acme/api已阻止
适用于
Claude CodeCursorCodexCopilotMCP agents
字节级精确
绝不破坏你的 Prompt Cache
0
行源代码离开设备
100%
可离线验证的回执
可由你亲自验证的证明
不要相信我们的数字。检查签名。
每一项 Surfil 声明都会附带一份 Ed25519 签名回执。验证可在离线状态下运行，无需账号——在你的机器上，依据公钥完成。这就是它的样子：
______~/acme/api - surfil
text $ surfil consolidate
扫描 Claude Code + Cursor 中的 6 个 MCP 服务器……
✓ consolidated 6 → 1 endpoint saved ~48k tokens/op
$ surfil audit
✓ recoverable spend this week: $96.40 (signed: rcpt_8f2a)
$ surfil verify rcpt_8f2a
✓ VALID (offline · epoch 7 · no account)
ⓘ 上述数字仅为示例。你的数字将在你自己的代码仓库中测量得出。我们不公布固定的节省百分比，因为诚实的答案取决于你的流量：Surfil 保证的是，每个数字都经过测量并签名，且拦截过程是字节级精确的，因此已经消除了大部分输入成本的提供商 Prompt Cache 能够持续命中。
问题
Agent 昂贵、有风险，而且健忘
这并不是因为它们不好——而是因为没有任何东西运行在它们身边，同时观察所有 Agent 的成本、安全性和记忆。
昂贵
Agent 会重复发送相同的上下文，并重复读取相同的文件。Token 支出不断增长，却没人能指出原因——或证明哪些支出可以追回。
有风险
Agent 会执行 Shell 命令、访问网络并粘贴负载。一次泄露的密钥或一次被注入的工具调用，往往在已经发生后才会被发现。
健忘
每次会话都从零开始。Agent 会重新推导你的架构、重新询问已经解决的问题，并忘记你已作出的决策。
Surfil 的功能
更便宜、更安全、可记忆——在同一条主干上
三个产品承载面向用户的核心故事。它们都是同一条流水线上的阶段，写入同一个签名知识网络。
工作原理
安装。拦截一次。验证回执。
从你当前的 Agent 账单到一项可交给任何人的签名数字，只需三步。
1 · 安装
在 Claude Code、Cursor、Codex 和 Copilot 旁完成一次安装。Core 会整合分散的 Agent 配置，并引导启动 Weave。
2 · 拦截一次
单一的本地设备拦截点，字节级精确透传。每个产品都是同一条流水线上的一个阶段；绝不使用第二个代理。
3 · 验证回执
节省金额和输出结果会被测量，然后由 Ed25519 签名。可对任何回执运行 surfil verify——离线、无需账号。签名就是证明。
产品目录
十一种产品，一个拦截点
每个产品都只会在共享主干上产生一种指标类型——因此每个数字都有来源和签名。
为何可以信任
我们无法违背的四项规则
这些不是政策，而是架构。要违背其中任何一项，都需要重建整个产品。
零痕迹
源代码永不离开设备。遥测数据仅包含元数据；记忆以密文形式同步。
签名输出
每项付费输出均由 Ed25519 签名，并且可离线验证——没有“相信我们”的仪表板。
诚实声明
只报告测量得出的事实，绝不声称“认证”。节省以 Token 为单位报告，并采用保守下限。
单一层
按规则只设一个拦截点。我们绝不会串联第二个代理来向你推销更多产品。
定价
执行不限量计费。签名输出按量计费。
运行 Agent 永不收费——你只需为 Surfil 产生的、由服务器签名的价值输出付费。一项签名输出 = 一个 Credit。
Starter
$5/月
Core 安装、Guard 监控和 Cap 成本账本
推荐
Pro
$25/月
Guard 强制执行、Cap 完整版、Mind、Radar · Bench · Pilot
Team
$20/席位
包含 Pro 的全部功能，以及团队仪表板和共享 Credit 池
Enterprise
定制
Proof · Fleet Control · Charter · Policy + SSO/SLA
常见问题
开发者最先提出的问题
我的源代码会离开我的机器吗？
不会。零痕迹是架构特性，不是一项设置。繁重的工作在本地设备运行时中完成；遥测仅包含元数据，记忆以密文同步。
我实际上能节省多少？
这取决于你的 Agent 是否已经使用 Prompt Cache，而 Surfil 会测量你属于哪种情况。如果它们已经使用，提供商缓存已消除大部分输入成本，而字节级精确拦截意味着 Surfil 绝不会破坏缓存。如果它们尚未使用，Surfil 可以安全地清理 Agent 已经淘汰的上下文。我们不公布固定百分比：你将在自己的流量中获得测量结果，以 Token 为单位，而绝不是虚构的美元金额。
它支持哪些 Agent？
通过一次安装即可支持 Claude Code、Cursor、Codex、Copilot 及其他 30 多种 Agent。它会以各自可用的方式连接——针对 CLI 和 MCP 提供完整流量拦截；针对 Cursor 等编辑器则通过 MCP 连接。运行 surfil doctor 可查看每种工具的连接方式。
什么是 Credit？
执行不限量计费。一项由服务器签名的价值输出等于一个 Credit。计量对象是签名输出，而不是 Agent 的运行过程。
我可以自行验证节省数据吗？
可以。对任何回执运行 surfil verify——离线、无需账号。证明是 Ed25519 签名，而不是仪表板。
如果我卸载会怎样？
彻底卸载会逐字节恢复每一项 Agent 配置，不留下任何残留。你可随时通过 surfil export 导出 Weave。
一次安装。之后验证一切。
Core 安装在你的 Agent 身边。对于通过 Surfil 路由的工具，Cap、Guard 和 Mind 将启用——没有任何内容会离开你的设备，卸载时则会逐字节恢复所有配置。
English / 原文
// on-device control plane for AI coding agents
One install. Cheaper, safer, and remembered.
Surfil runs beside Claude Code, Cursor, Codex & Copilot. The tools that route through it get cheaper and safer; editors like Cursor connect through MCP - every claim proven with a signature, and your source never leaves the machine.
______surfil · your control plane
✓rcpt_8f2aepoch 7 · offlineVALID
!AWS key in payloadacme/apiblocked
Works with
Claude CodeCursorCodexCopilotMCP agents
byte-exact
never busts your prompt cache
0
lines of source leave device
100%
offline-verifiable receipts
Proof you can verify yourself
Don't trust our numbers. Check the signature.
Every Surfil claim ships as an Ed25519-signed receipt. Verification runs offline, with no account - on your machine, against a public key. This is what it looks like:
______~/acme/api - surfil
$ surfil consolidate
scanning 6 MCP servers across Claude Code + Cursor…
✓ consolidated 6 → 1 endpoint saved ~48k tokens/op
$ surfil audit
✓ recoverable spend this week: $96.40 (signed: rcpt_8f2a)
$ surfil verify rcpt_8f2a
✓ VALID (offline · epoch 7 · no account)
ⓘ The numbers above are illustrative. Yours are measured on your own repos. We publish no fixed savings percentage, because the honest answer depends on your traffic: what Surfil guarantees is that every figure is measured and signed , and that interception is byte-exact , so the provider prompt cache that already removes most of your input cost keeps hitting.
The problem
Agents are expensive, risky, and forgetful
Not because they're bad - because nothing sits beside them watching cost, safety and memory across all of them at once.
Expensive
Agents re-send the same context and re-read the same files. Token spend creeps up and nobody can point to why - or prove what's recoverable.
Risky
Agents run shell commands, hit the network, and paste payloads. One leaked key or injected tool-call is discovered after it already happened.
Forgetful
Every session starts from zero. Agents re-derive your architecture, re-ask settled questions, and forget the decisions you already made.
What Surfil does
Cheaper, safer, remembered - on one spine
Three products carry the consumer story. All of them are stages on the same pipeline, writing to the same signed knowledge network.
How it works
Install. Intercept once. Verify the receipt.
Three steps between your current agent bill and a signed number you can hand to anyone.
1 · Install
One install beside Claude Code, Cursor, Codex and Copilot. Core consolidates your scattered agent configs and bootstraps Weave.
2 · Intercept once
A single on-device interception point, byte-exact passthrough. Every product is a stage on the same pipeline; no second proxy, ever.
3 · Verify the receipt
Savings and outputs are measured, then Ed25519-signed. Run surfil verify on any receipt - offline, no account. The signature is the proof.
The catalog
Eleven products, one interception point
Each product produces exactly one metric type on the shared spine - so every number has a source and a signature.
Why you can trust it
Four rules we can't break
These aren't policies - they're architecture. Breaking any of them would require rebuilding the product.
Zero-trace
Source never leaves the device. Telemetry is metadata only; memory syncs as ciphertext.
Signed outputs
Every paid output is Ed25519-signed and verifiable offline - no trust-us dashboards.
Honest claims
Measured facts, never “certified”. Savings reported in tokens, at the conservative floor.
One layer
A single interception point, by rule. We never chain a second proxy to sell you more.
Pricing
Execution is unmetered. Signed output is metered.
You're never charged for running your agents - only for the server-signed value-outputs Surfil produces. One signed output = one Credit.
Starter
$5/mo
Core install, Guard monitor and the Cap cost ledger
recommended
Pro
$25/mo
Guard enforce, Cap full, Mind, Radar · Bench · Pilot
Team
$20/seat
Everything in Pro, plus team dashboards and pooled credits
Enterprise
custom
Proof · Fleet Control · Charter · Policy + SSO/SLA
FAQ
Questions developers ask first
Does my source code leave my machine?
No. Zero-trace is architectural, not a setting. The heavy work runs in the on-device runtime; telemetry is metadata only and memory syncs as ciphertext.
How much will I actually save?
That depends on whether your agents already use prompt caching, and Surfil measures which case you are in. If they do, the provider cache is already removing most of your input cost, and byte-exact interception means Surfil never busts it. If they do not, Surfil can safely prune context an agent already superseded. We publish no fixed percentage: you get the measured figure on your own traffic, in tokens, never an invented dollar amount.
Which agents does it work with?
Claude Code, Cursor, Codex, Copilot and 30+ more, from one install. It connects each the way it can - full traffic interception for CLIs and MCP, MCP for editors like Cursor. Run surfil doctor to see how each connects.
What is a Credit?
Execution is unmetered. One server-signed value-output equals one Credit. You're metered on signed output, never on running the agent.
Can I verify the savings myself?
Yes. Run surfil verify on any receipt - offline, no account. The signature (Ed25519) is the proof, not a dashboard.
What happens if I uninstall?
A clean uninstall restores every agent config byte-for-byte and leaves zero residue. Export your Weave anytime with surfil export.
Install once. Verify everything after.
Core installs beside your agents. Cap, Guard and Mind light up for the tools that route through Surfil - nothing leaves your device, and uninstalling restores every config byte-for-byte.