Skip to content
LyraShield AIOpen beta

Updated

Aider

Aider configures MCP servers as a YAML list under mcp-servers in ~/.aider.conf.yml, or via the --mcp-servers '<json>' CLI flag. Remote entries use transport: http + url. Aider has no MCP rules file — there is no AGENTS.md or equivalent to write.

Get the exact values with the CLI

Aider uses a YAML config format that LyraShield's CLI cannot safely write automatically. Run npx lyrashield install aider to print the exact values generated from the current registry, then paste them into your config by hand.

npx lyrashield install aider

Local stdio setup

Add the following entry to the mcp-servers list in ~/.aider.conf.yml. Create the file if it does not exist.

Install type: Aider: requires manual configuration.

Use this command in a terminal, or enter the same values in the agent's MCP settings UI. Replace <LYRASHIELD_API_KEY> with your workspace API key.

LYRASHIELD_API_KEY=<LYRASHIELD_API_KEY> LYRASHIELD_API_URL=https://app.lyrashieldai.com npx -y @lyrashield/mcp
One-line install: the CLI prints these connection values; add them in the agent's own settings UI.
npx lyrashield install aider

Important gotchas

  • Aider's MCP is configured as a YAML list under `mcp-servers` in ~/.aider.conf.yml (or a `--mcp-servers '<json>'` CLI flag) — not a `mcpServers` JSON dict. Remote entries use `transport: http` + `url`.
  • Aider has no MCP rules file.

Remote HTTP setup

For environments where you prefer not to run a local process, connect to the remote endpoint. Aider uses transport: http with url for remote MCP servers.

Install type: Aider: requires manual configuration.

Use this command in a terminal, or enter the same values in the agent's MCP settings UI. Replace <LYRASHIELD_API_KEY> with your workspace API key.

LYRASHIELD_API_KEY=<LYRASHIELD_API_KEY> LYRASHIELD_API_URL=https://app.lyrashieldai.com npx -y @lyrashield/mcp
Read-only vs. read-and-write: Remote mutating tools (scan triggers, finding submissions, report creation) require an explicit OAuth write scope or write-capable API key, plus a human out-of-band approval. Read-only inspection tools work with any key.

Verify the connection

Start Aider and ask: "What LyraShield tools do you have access to?" to confirm the server is connected.

Requirements: Node.js 20+ and a LyraShield workspace API key. The@lyrashield/mcp package is published on npm, sonpx -y @lyrashield/mcp resolves directly.