Expired50% confidenceFactTime unknown
The Spark plugin likely intercepts Windsurf's local API calls and automatically replaces locally stored authentication tokens (such as JWT or OAuth tokens) to switch accounts.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/2/2026
First Seen
Valid until: 9/30/2026(expired)
Sources
The Truth Behind Windsurf's "Unlimited Credits" Hack: Shared Account Pool Rotation Mechanism and Risk Analysis
bilibili默然萧璃
Related Claims
UnverifiedXinghuо WinShape's seamless account-switching feature can automatically switch to the next available account without restarting Windsurf65% similarUnverifiedThe az login command triggers the OAuth 2.0 Authorization Code Flow, and upon completion of verification, the Access Token and Refresh Token are cached locally.63% similarUnverifiedThe Xinghu tool requires use in conjunction with a browser plugin, achieving identity switching without restarting the application by intercepting authentication requests and replacing tokens.59% similarUnverifiedA third-party tool called "Xinghu" (星火) has appeared in the community, enabling seamless account switching in Windsurf, automatically switching to the next available account when one account's free quota is exhausted.58% similarUnverifiedXinghuо WinShape offers a proxy-free account switching feature that, when enabled, allows account switching without the use of network proxy tools58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/54959API
curl https://kongchang.com/api/v1/knowledge/claims/54959MCP
get_claim(id=54959)