Skip to content

Updated

Replit Agent

This guide uses LyraShield's integration registry for the cloud surface. It shows the current setup strategy and client source; actual client loading and authenticated runtime acceptance are tracked separately below.

Connection setup

The registry's setup path for this client is Guided manual setup over remote HTTP.

Client activation instructions

Add LyraShield as a custom MCP integration in Replit Agent using the hosted Streamable HTTP endpoint and OAuth. Import shared skills under the project `.agents/skills` directory or through Workspace Settings for workspace-level availability. Replit's custom install link can carry the endpoint metadata, but never embed a secret in a shared link.

Install type: No verified native MCP configuration is available for this client.
Add LyraShield as a custom MCP integration in Replit Agent using the hosted Streamable HTTP endpoint and OAuth. Import shared skills under the project `.agents/skills` directory or through Workspace Settings for workspace-level availability. Replit's custom install link can carry the endpoint metadata, but never embed a secret in a shared link.
Manual setup: the pinned CLI package (lyrashield@0.2.14) has no matching installer contract for this integration. Use the configuration or client instructions above and verify the client loads it.

Important gotchas

  • Replit supports OAuth dynamic client registration when the MCP server supports it and offers static custom headers as a fallback. LyraShield has a dynamic registration endpoint; client runtime acceptance is still pending.
  • Project skills use `/.agents/skills`; workspace-level skills are managed in Workspace Settings. No plugin package format is claimed for Replit Agent.
  • Replit scans MCP tool definitions and planned executions; its cloud workspace and permissions remain distinct from local CLI credentials.
Hosted access: use OAuth when the client supports it. Hosted mutations require a browser-confirmed delegation and are checked against its workspace, scope and expiry. An API key alone does not authorize hosted mutations. See the Remote MCP guide.

Native components and distribution

Documented client capabilities: skills. These describe what the client can load; use the installer and distribution details below to see which LyraShield components are available for this surface.

Install shared LyraShield skills

The pinned CLI includes a skills installer for this client. Preview its file changes first, then run the install command. Existing files that are not LyraShield-owned, or have been customized, are preserved.

npx -y lyrashield@0.2.14 skills install replit-agent --project --dry-run
npx -y lyrashield@0.2.14 skills install replit-agent --project

Restart or reload the client and verify its skill list. Local files do not prove discovery, authentication, marketplace listing or runtime acceptance.

Distribution route: Custom Replit MCP integration and project Agent Skills; registry state DIRECT. Client distribution documentation.

Support evidence

Registry tier: COMPATIBLE. Evidence: DOCUMENTATION, checked 2026-10-01. Client version: not recorded; tested platforms: not recorded. No client runtime receipt is recorded.Marketplace state and runtime compatibility are separate claims.

Source: Replit Agent official documentation.