Updated
Windsurf
Windsurf (by Codeium) stores MCP configuration in a global file at ~/.codeium/windsurf/mcp_config.json. The file applies to all projects.
Local stdio setup
Add the following to ~/.codeium/windsurf/mcp_config.json. Create the file if it does not exist.
{
"mcpServers": {
"lyrashield": {
"command": "npx",
"args": ["-y", "@lyrashield/mcp"],
"env": {
"LYRASHIELD_API_KEY": "lsk_your_key_here",
"LYRASHIELD_API_URL": "https://app.lyrashieldai.com"
}
}
}
}Remote endpoint (Windsurf cloud / hosted)
For Windsurf cloud environments that cannot run local processes, use serverUrl instead of command + args to connect to the remote Streamable-HTTP endpoint.
{
"mcpServers": {
"lyrashield": {
"serverUrl": "https://app.lyrashieldai.com/api/mcp",
"headers": {
"Authorization": "Bearer lsk_your_key_here"
}
}
}
}Read-only vs. read-and-write: Remote mutating tools (scan triggers, finding submissions) require a read-and-write API key and an explicit opt-in. Read-only inspection tools work with any key.
Verify the connection
Restart Windsurf and open Settings → MCP Servers. The lyrashield entry should appear as active. Run a quick check by asking Cascade: "What LyraShield tools do you have access to?"
Requirements: Node.js 20+ and a LyraShield workspace API key. The
@lyrashield/mcp package is published on npm, sonpx -y @lyrashield/mcp resolves directly.