Updated
Kilo Code
Kilo Code reads MCP servers from kilo.jsonc in your project root (JSONC — JSON with comments). The root key is mcp.
Env interpolation: Like OpenCode, Kilo Code uses single-brace
{env:VAR} for environment variable interpolation — not ${VAR}.Local stdio setup
{
// kilo.jsonc
"mcp": {
"lyrashield": {
"type": "local",
"command": "npx",
"args": ["-y", "@lyrashield/mcp"],
"env": {
"LYRASHIELD_API_KEY": "{env:LYRASHIELD_API_KEY}",
"LYRASHIELD_API_URL": "https://app.lyrashieldai.com"
}
}
}
}Remote endpoint
{
"mcp": {
"lyrashield": {
"type": "remote",
"url": "https://app.lyrashieldai.com/api/mcp",
"headers": {
"Authorization": "Bearer {env:LYRASHIELD_API_KEY}"
}
}
}
}Verify the connection
Reload the Kilo Code window and open the MCP servers panel. Confirm that the lyrashield server shows a connected status.
Requirements: Node.js 20+ and a LyraShield workspace API key. The
@lyrashield/mcp package is published on npm, sonpx -y @lyrashield/mcp resolves directly.