Skip to content
LyraShield AIOpen beta

Updated

Windsurf

Windsurf (by Codeium) stores MCP configuration in a global file at ~/.codeium/windsurf/mcp_config.json. The file applies to all projects.

Local stdio setup

Add the following to ~/.codeium/windsurf/mcp_config.json. Create the file if it does not exist.

{
  "mcpServers": {
    "lyrashield": {
      "command": "npx",
      "args": ["-y", "@lyrashield/mcp"],
      "env": {
        "LYRASHIELD_API_KEY": "lsk_your_key_here",
        "LYRASHIELD_API_URL": "https://app.lyrashieldai.com"
      }
    }
  }
}

Remote endpoint (Windsurf cloud / hosted)

For Windsurf cloud environments that cannot run local processes, use serverUrl instead of command + args to connect to the remote Streamable-HTTP endpoint.

{
  "mcpServers": {
    "lyrashield": {
      "serverUrl": "https://app.lyrashieldai.com/api/mcp",
      "headers": {
        "Authorization": "Bearer lsk_your_key_here"
      }
    }
  }
}
Read-only vs. read-and-write: Remote mutating tools (scan triggers, finding submissions) require a read-and-write API key and an explicit opt-in. Read-only inspection tools work with any key.

Verify the connection

Restart Windsurf and open Settings → MCP Servers. The lyrashield entry should appear as active. Run a quick check by asking Cascade: "What LyraShield tools do you have access to?"

Requirements: Node.js 20+ and a LyraShield workspace API key. The@lyrashield/mcp package is published on npm, sonpx -y @lyrashield/mcp resolves directly.