Updated
Devin
Devin connects custom MCP servers through its MCP Marketplace. It does not use the legacy Windsurf configuration path. Configure LyraShield in the Devin UI and verify the server before relying on it in a session.
Add LyraShield in Devin
- Open Settings → MCP Marketplace in Devin.
- Select Add Your Own and choose HTTP.
- Enter
https://app.lyrashieldai.com/api/mcpas the server URL. - Add an
Authorizationheader withBearer <your lsk_ API key>. Keep that key out of source control. - Save, then select Test listing tools.
Credential choice
Use a scoped LyraShield API key for the Marketplace header. The local OAuth device flow is for LyraShield CLI and local stdio clients; Devin's hosted Marketplace configuration needs the header supplied in its UI.
Verify the connection
After the Marketplace test passes, start a Devin session and ask which LyraShield tools are available. Remote write actions remain approval-gated; read-only inspection does not grant permission to trigger a scan or create a pull request.
See Devin's official MCP Marketplace documentationfor its current transport fields and troubleshooting guidance.