MCP server intelligence profile

Codex MCP Server

Connects AI assistants like Claude to the Codex CLI for code analysis, editing, and execution. Supports file references with @ syntax, sandboxed code execution with approval workflows, and structured code changes for automated refactoring and documentation

Local Onlycexll
Awaiting current scanNpm · 1.2.5

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

1Distribution channel
8Independently observed tools
0Linked remote endpoints
AvailableVersion intelligence

Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.

Install and connect

Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.

Install @cexll/codex-mcp-server from npm

Version 1.2.5 declares 1 executable entrypoint.

npm install --save-exact @cexll/codex-mcp-server@1.2.5
npx -y -p @cexll/codex-mcp-server@1.2.5 @cexll/codex-mcp-server
MCP client configuration example
{
  "mcpServers": {
    "@cexll/codex-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "-p",
        "@cexll/codex-mcp-server@1.2.5",
        "@cexll/codex-mcp-server"
      ]
    }
  }
}

Identity

Canonical slugcodex-mcp-server-85b99de0DeploymentLocal Only
Canonical packagenpm:@cexll/codex-mcp-serverRepositorycexll/codex-mcp-server
First published—Latest release—
Last security verification—Classification confidence90%
PublicationDraftOfficial distributionNot verified

Distributions

ChannelIdentifierCurrent versionVersionsSource
npm@cexll/codex-mcp-server1.2.56Repository

Current release

PackageVersionPublished / observedInventorySecurity scan
npm@cexll/codex-mcp-server1.2.5CurrentSep 5, 20268 toolsSucceeded · 0 resources · 8 promptsEvidence restricted
Enterprise protection

Continuously monitor this MCP for security risk

Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.

  • Independent exact-version security scans
  • Continuous release and vulnerability monitoring
  • Risk-change alerts with capability context
  • Historical evidence and API exports
Custom pricingContact salesTailored to your organization, integrations, data needs, and support requirements.

Current version evidence

No public current-version evidence is available yet.

Current protocol inventory

2024-11-05Negotiated protocol
codex-cli-mcpServer-reported name
4Capability groups
Aug 14, 2026Observed

Tools 8

ToolCategoryAnnotationsRisk
ask-codexExecute Codex CLI with file analysis (@syntax), model selection, and safety controls. Supports changeMode.
Input schema
{
  "type": "object",
  "properties": {
    "prompt": {
      "type": "string",
      "minLength": 1,
      "description": "Task or question. Use @ to include files (e.g., '@largefile.ts explain')."
    },
    "model": {
      "type": "string",
      "description": "Model: gpt-5-codex, gpt-5, o3, o4-mini, codex-1, codex-mini-latest, gpt-4.1. Default: gpt-5-codex"
    },
    "sandbox": {
      "type": "boolean",
      "default": false,
      "description": "Quick automation mode: enables workspace-write + on-failure approval. Alias for fullAuto."
    },
    "fullAuto": {
      "type": "boolean",
      "description": "Full automation mode"
    },
    "approvalPolicy": {
      "type": "string",
      "enum": [
        "never",
        "on-request",
        "on-failure",
        "untrusted"
      ],
      "description": "Approval: never, on-request, on-failure, untrusted"
    },
    "approval": {
      "type": "string",
      "description": "Approval policy: untrusted, on-failure, on-request, never"
    },
    "sandboxMode": {
      "type": "string",
      "enum": [
        "read-only",
        "workspace-write",
        "danger-full-access"
      ],
      "description": "Access: read-only, workspace-write, danger-full-access"
    },
    "yolo": {
      "type": "boolean",
      "description": "⚠️ Bypass all safety (dangerous)"
    },
    "cd": {
      "type": "string",
      "description": "Working directory"
    },
    "workingDir": {
      "type": "string",
      "description": "Working directory for execution"
    },
    "changeMode": {
      "type": "boolean",
      "default": false,
      "description": "Return structured OLD/NEW edits for refactoring"
    },
    "chunkIndex": {
      "type": "number",
      "minimum": 1,
      "description": "Chunk index (1-based)"
    },
    "chunkCacheKey": {
      "type": "string",
      "description": "Cache key for continuation"
    },
    "image": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      ],
      "description": "Optional image file path(s) to include with the prompt"
    },
    "config": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "object",
          "additionalProperties": {}
        }
      ],
      "description": "Configuration overrides as 'key=value' string or object"
    },
    "profile": {
      "type": "string",
      "description": "Configuration profile to use from ~/.codex/config.toml"
    },
    "timeout": {
      "type": "number",
      "description": "Maximum execution time in milliseconds (optional)"
    },
    "includeThinking": {
      "type": "boolean",
      "default": true,
      "description": "Include reasoning/thinking section in response"
    },
    "includeMetadata": {
      "type": "boolean",
      "default": true,
      "description": "Include configuration metadata in response"
    },
    "search": {
      "type": "boolean",
      "description": "Enable web search by activating web_search_request feature flag. Requires network access - automatically sets sandbox to workspace-write if not specified."
    },
    "oss": {
      "type": "boolean",
      "description": "Use local Ollama server (convenience for -c model_provider=oss). Requires Ollama running locally. Automatically sets sandbox to workspace-write if not specified."
    },
    "enableFeatures": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Enable feature flags (repeatable). Equivalent to -c features.<name>=true"
    },
    "disableFeatures": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Disable feature flags (repeatable). Equivalent to -c features.<name>=false"
    }
  },
  "required": [
    "prompt"
  ]
}
——
batch-codexDelegate multiple atomic tasks to Codex for batch processing. Ideal for repetitive operations, mass refactoring, and automated code transformations
Input schema
{
  "type": "object",
  "properties": {
    "tasks": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "task": {
            "type": "string",
            "description": "Atomic task description"
          },
          "target": {
            "type": "string",
            "description": "Target files/directories (use @ syntax)"
          },
          "priority": {
            "type": "string",
            "enum": [
              "high",
              "normal",
              "low"
            ],
            "default": "normal",
            "description": "Task priority"
          }
        },
        "required": [
          "task"
        ],
        "additionalProperties": false
      },
      "minItems": 1,
      "description": "Array of atomic tasks to delegate to Codex"
    },
    "model": {
      "type": "string",
      "description": "Model to use: gpt-5-codex, gpt-5, o3, o4-mini, codex-1, codex-mini-latest, gpt-4.1"
    },
    "sandbox": {
      "type": "string",
      "default": "workspace-write",
      "description": "Sandbox mode: read-only, workspace-write, danger-full-access"
    },
    "parallel": {
      "type": "boolean",
      "default": false,
      "description": "Execute tasks in parallel (experimental)"
    },
    "stopOnError": {
      "type": "boolean",
      "default": true,
      "description": "Stop execution if any task fails"
    },
    "timeout": {
      "type": "number",
      "description": "Maximum execution time per task in milliseconds"
    },
    "workingDir": {
      "type": "string",
      "description": "Working directory for execution"
    },
    "search": {
      "type": "boolean",
      "description": "Enable web search for all tasks (activates web_search_request feature)"
    },
    "oss": {
      "type": "boolean",
      "description": "Use local Ollama server"
    },
    "enableFeatures": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Enable feature flags"
    },
    "disableFeatures": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Disable feature flags"
    }
  },
  "required": [
    "tasks"
  ]
}
——
brainstormGenerate creative ideas using structured frameworks with domain context and feasibility analysis.
Input schema
{
  "type": "object",
  "properties": {
    "prompt": {
      "type": "string",
      "minLength": 1,
      "description": "Brainstorming challenge or question"
    },
    "model": {
      "type": "string",
      "description": "Model: gpt-5-codex (default), gpt-5, o3, o4-mini, codex-1, codex-mini-latest, gpt-4.1"
    },
    "approvalPolicy": {
      "type": "string",
      "enum": [
        "never",
        "on-request",
        "on-failure",
        "untrusted"
      ],
      "description": "Approval: never, on-request, on-failure, untrusted"
    },
    "sandboxMode": {
      "type": "string",
      "enum": [
        "read-only",
        "workspace-write",
        "danger-full-access"
      ],
      "description": "Access: read-only, workspace-write, danger-full-access"
    },
    "fullAuto": {
      "type": "boolean",
      "description": "Full automation mode"
    },
    "yolo": {
      "type": "boolean",
      "description": "⚠️ Bypass all safety (dangerous)"
    },
    "cd": {
      "type": "string",
      "description": "Working directory"
    },
    "methodology": {
      "type": "string",
      "enum": [
        "divergent",
        "convergent",
        "scamper",
        "design-thinking",
        "lateral",
        "auto"
      ],
      "default": "auto",
      "description": "Framework: divergent, convergent, scamper, design-thinking, lateral, auto (default)"
    },
    "domain": {
      "type": "string",
      "description": "Domain: software, business, creative, research, product, marketing, etc."
    },
    "constraints": {
      "type": "string",
      "description": "Limitations: budget, time, technical, legal, etc."
    },
    "existingContext": {
      "type": "string",
      "description": "Background info or previous attempts"
    },
    "ideaCount": {
      "type": "integer",
      "exclusiveMinimum": 0,
      "default": 12,
      "description": "Number of ideas (default: 12, range: 5-30)"
    },
    "includeAnalysis": {
      "type": "boolean",
      "default": true,
      "description": "Include feasibility/impact analysis"
    },
    "search": {
      "type": "boolean",
      "description": "Enable web search for research (activates web_search_request feature)"
    },
    "oss": {
      "type": "boolean",
      "description": "Use local Ollama server"
    },
    "enableFeatures": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Enable feature flags"
    },
    "disableFeatures": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Disable feature flags"
    }
  },
  "required": [
    "prompt"
  ]
}
——
fetch-chunkRetrieves cached chunks from a changeMode response. Use this to get subsequent chunks after receiving a partial changeMode response.
Input schema
{
  "type": "object",
  "properties": {
    "cacheKey": {
      "type": "string",
      "description": "The cache key provided in the initial changeMode response"
    },
    "chunkIndex": {
      "type": "number",
      "minimum": 1,
      "description": "Which chunk to retrieve (1-based index)"
    }
  },
  "required": [
    "cacheKey",
    "chunkIndex"
  ]
}
——
Helpreceive help information
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
——
pingEcho
Input schema
{
  "type": "object",
  "properties": {
    "prompt": {
      "type": "string",
      "default": "",
      "description": "Message to echo "
    }
  },
  "required": []
}
——
timeout-testTest timeout prevention by running for a specified duration
Input schema
{
  "type": "object",
  "properties": {
    "duration": {
      "type": "number",
      "minimum": 10,
      "description": "Duration in milliseconds (minimum 10ms)"
    }
  },
  "required": [
    "duration"
  ]
}
——
versionDisplay version and system information
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
——

Resources 0

  • None observed.

Resource templates 0

  • None observed.

Prompts 8

  • ask-codexask-codex

    Execute Codex CLI with optional changeMode

  • batch-codexbatch-codex

    Execute multiple atomic Codex tasks in batch mode for efficient automation

  • brainstormbrainstorm

    Create structured brainstorming with chosen methodology and analysis

  • fetch-chunkfetch-chunk

    Fetch the next chunk of a response

  • HelpHelp

    receive help information

  • pingping

    Echo test message with structured response.

  • timeout-testtimeout-test

    Test the timeout prevention system by running a long operation

  • versionversion

    Get version information for Codex CLI and MCP server

Remote endpoints

EndpointTransportAuthenticationHealthObserved
No verified remote endpoint is linked.

Codex MCP Server questions

How do I install Codex MCP Server?

Install the selected package version with: npm install --save-exact @cexll/codex-mcp-server@1.2.5

What tools does Codex MCP Server provide?

Codex MCP Server exposed 8 tools during independent protocol observation, including ask-codex, batch-codex, brainstorm, fetch-chunk, Help, ping, timeout-test, version.

Is Codex MCP Server secure?

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

Explore related MCP server guides

Curated product and capability guides containing this catalog record.

Official vs Community MCP Servers

Let’s talk about MCP security.

Share your details and our security team will contact you.