MCP server intelligence profile

codex-mcp-server MCP Server

Bridges Claude and OpenAI's Codex CLI for AI-powered code analysis, generation, and review, with support for session management, web search, and structured output

Local Onlytuannvm
Awaiting current scanNpm · 1.4.10

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

1Distribution channel
6Independently observed tools
0Linked remote endpoints
AvailableVersion intelligence

Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.

Install and connect

Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.

Install codex-mcp-server from npm

Version 1.4.10 declares 1 executable entrypoint.

npm install --save-exact codex-mcp-server@1.4.10
npx -y -p codex-mcp-server@1.4.10 codex-mcp-server
MCP client configuration example
{
  "mcpServers": {
    "codex-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "-p",
        "codex-mcp-server@1.4.10",
        "codex-mcp-server"
      ]
    }
  }
}

Identity

Canonical slugcodex-mcp-server-cacea882DeploymentLocal Only
Canonical packagenpm:codex-mcp-serverRepositorytuannvm/codex-mcp-server
First published—Latest release—
Last security verification—Classification confidence90%
PublicationDraftOfficial distributionNot verified

Distributions

ChannelIdentifierCurrent versionVersionsSource
npmcodex-mcp-server1.4.1027Repository

Current release

PackageVersionPublished / observedInventorySecurity scan
npmcodex-mcp-server1.4.10CurrentSep 5, 20266 toolsSucceeded · 0 resources · 0 promptsEvidence restricted
Enterprise protection

Continuously monitor this MCP for security risk

Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.

  • Independent exact-version security scans
  • Continuous release and vulnerability monitoring
  • Risk-change alerts with capability context
  • Historical evidence and API exports
Custom pricingContact salesTailored to your organization, integrations, data needs, and support requirements.

Current version evidence

No public current-version evidence is available yet.

Current protocol inventory

2025-06-18Negotiated protocol
codex-mcp-serverServer-reported name
1Capability groups
Aug 15, 2026Observed

Tools 6

ToolCategoryAnnotationsRisk
codexExecute Codex CLI in non-interactive mode for AI assistance
Input schema
{
  "type": "object",
  "properties": {
    "prompt": {
      "type": "string",
      "description": "The coding task, question, or analysis request"
    },
    "sessionId": {
      "type": "string",
      "description": "Optional session ID for conversational context. Note: when resuming a session, sandbox/fullAuto/workingDirectory parameters are not applied (CLI limitation)"
    },
    "resetSession": {
      "type": "boolean",
      "description": "Reset the session history before processing this request"
    },
    "model": {
      "type": "string",
      "description": "Specify which model to use (defaults to gpt-5.3-codex). Options: gpt-5.3-codex, gpt-5.2-codex, gpt-5.1-codex, gpt-5.1-codex-max, gpt-5-codex, gpt-4o, gpt-4, o3, o4-mini"
    },
    "reasoningEffort": {
      "type": "string",
      "enum": [
        "none",
        "minimal",
        "low",
        "medium",
        "high",
        "xhigh"
      ],
      "description": "Control reasoning depth (none < minimal < low < medium < high < xhigh)"
    },
    "sandbox": {
      "type": "string",
      "enum": [
        "read-only",
        "workspace-write",
        "danger-full-access"
      ],
      "description": "Sandbox policy for shell command execution. read-only: no writes allowed, workspace-write: writes only in workspace, danger-full-access: full system access (dangerous)"
    },
    "fullAuto": {
      "type": "boolean",
      "description": "Enable full-auto mode: sandboxed automatic execution without approval prompts (equivalent to -a on-request --sandbox workspace-write)"
    },
    "workingDirectory": {
      "type": "string",
      "description": "Working directory for the agent to use as its root (passed via -C flag)"
    },
    "callbackUri": {
      "type": "string",
      "description": "Static MCP callback URI to pass to Codex via environment (if provided)"
    }
  },
  "required": [
    "prompt"
  ]
}
Output schema
{
  "type": "object",
  "properties": {
    "threadId": {
      "type": "string"
    }
  }
}
Annotations
{
  "title": "Execute Codex CLI",
  "readOnlyHint": false,
  "destructiveHint": true,
  "idempotentHint": false,
  "openWorldHint": true
}
—WritesDestructiveNon-idempotentOpen world—
helpGet Codex CLI help information
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
Annotations
{
  "title": "Get Help",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
—Read onlyNon-destructiveIdempotentClosed world—
listSessionsList all active conversation sessions with metadata
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
Annotations
{
  "title": "List Sessions",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
—Read onlyNon-destructiveIdempotentClosed world—
pingTest MCP server connection
Input schema
{
  "type": "object",
  "properties": {
    "message": {
      "type": "string",
      "description": "Message to echo back"
    }
  },
  "required": []
}
Annotations
{
  "title": "Ping Server",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
—Read onlyNon-destructiveIdempotentClosed world—
reviewRun a code review against the current repository using Codex CLI
Input schema
{
  "type": "object",
  "properties": {
    "prompt": {
      "type": "string",
      "description": "Custom review instructions or focus areas (cannot be used with uncommitted=true; use base/commit review instead)"
    },
    "uncommitted": {
      "type": "boolean",
      "description": "Review staged, unstaged, and untracked changes (working tree) - cannot be combined with custom prompt"
    },
    "base": {
      "type": "string",
      "description": "Review changes against a specific base branch (e.g., \"main\", \"develop\")"
    },
    "commit": {
      "type": "string",
      "description": "Review the changes introduced by a specific commit SHA"
    },
    "title": {
      "type": "string",
      "description": "Optional title to display in the review summary"
    },
    "model": {
      "type": "string",
      "description": "Specify which model to use for the review (defaults to gpt-5.3-codex)"
    },
    "workingDirectory": {
      "type": "string",
      "description": "Working directory to run the review in (passed via -C as a global Codex option)"
    }
  },
  "required": []
}
Annotations
{
  "title": "Code Review",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
—Read onlyNon-destructiveIdempotentOpen world—
websearchPerform web search using Codex CLI with web search enabled
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "The search query to execute"
    },
    "numResults": {
      "type": "integer",
      "description": "Number of search results to return (1-50, default: 10)",
      "minimum": 1,
      "maximum": 50
    },
    "searchDepth": {
      "type": "string",
      "enum": [
        "basic",
        "full"
      ],
      "description": "Search depth: basic (faster) or full (deeper analysis, default: basic)"
    }
  },
  "required": [
    "query"
  ]
}
Annotations
{
  "title": "Web Search",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
—Read onlyNon-destructiveIdempotentOpen world—

Resources 0

  • None observed.

Resource templates 0

  • None observed.

Prompts 0

  • None observed.

Remote endpoints

EndpointTransportAuthenticationHealthObserved
No verified remote endpoint is linked.

codex-mcp-server MCP Server questions

How do I install codex-mcp-server MCP Server?

Install the selected package version with: npm install --save-exact codex-mcp-server@1.4.10

What tools does codex-mcp-server MCP Server provide?

codex-mcp-server MCP Server exposed 6 tools during independent protocol observation, including codex, help, listSessions, ping, review, websearch.

Is codex-mcp-server MCP Server secure?

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

Explore related MCP server guides

Curated product and capability guides containing this catalog record.

Official vs Community MCP Servers

Let’s talk about MCP security.

Share your details and our security team will contact you.