Updated 2026-07-24

OpenClaw

OpenClaw uses MCPorter YAML to configure MCP server connections. Define the LyraShield server under the mcp_servers: key with stdio transport.

MCPorter YAML configuration

Add the following to your MCPorter YAML configuration file (typically mcporter.yaml or your OpenClaw agent profile YAML):

mcp_servers:
  lyrashield:
    transport: stdio
    command: npx
    args:
      - "-y"
      - "@lyrashield/mcp"
    env:
      LYRASHIELD_API_KEY: "lsk_your_key_here"
      LYRASHIELD_API_URL: "https://app.lyrashieldai.com"

Skill definition (optional)

Create a skill.md file in your OpenClaw skills directory to teach the agent when to invoke LyraShield automatically. For example:

# LyraShield Security Checks

Run LyraShield checks before submitting a pull request or after applying a fix.

## When to use
- Before creating a PR: run check_diff on the staged changes
- After applying a security fix: run verify_fix to confirm resolution
- When reviewing dependency updates: run supply chain checks

## How to invoke
Use the lyrashield MCP tools available in the tool registry.

Verify the connection

Start OpenClaw and list available tools. The LyraShield tools from the MCP server should appear in the tool registry.