Skip to content
LyraShield AIOpen beta

Updated

Kilo Code

Kilo Code reads MCP servers from kilo.jsonc in your project root (JSONC — JSON with comments). The root key is mcp.

Env interpolation: Like OpenCode, Kilo Code uses single-brace {env:VAR} for environment variable interpolation — not ${VAR}.

Local stdio setup

{
  // kilo.jsonc
  "mcp": {
    "lyrashield": {
      "type": "local",
      "command": "npx",
      "args": ["-y", "@lyrashield/mcp"],
      "env": {
        "LYRASHIELD_API_KEY": "{env:LYRASHIELD_API_KEY}",
        "LYRASHIELD_API_URL": "https://app.lyrashieldai.com"
      }
    }
  }
}

Remote endpoint

{
  "mcp": {
    "lyrashield": {
      "type": "remote",
      "url": "https://app.lyrashieldai.com/api/mcp",
      "headers": {
        "Authorization": "Bearer {env:LYRASHIELD_API_KEY}"
      }
    }
  }
}

Verify the connection

Reload the Kilo Code window and open the MCP servers panel. Confirm that the lyrashield server shows a connected status.

Requirements: Node.js 20+ and a LyraShield workspace API key. The@lyrashield/mcp package is published on npm, sonpx -y @lyrashield/mcp resolves directly.