← codex-mcp-server

codex-mcp-server 1.4.10

npm · codex-mcp-server · current release

6
Tools
0
Resources
0
Templates
0
Prompts

Observation

Observed 2026-08-15T19:03:05.598Z using mcpSecurity-inventory. Status: succeeded. Negotiated protocol: 2025-06-18.

Server capabilities
{
  "tools": {}
}

Tools 6

ToolCategoryAnnotationsRisk
codexExecute Codex CLI in non-interactive mode for AI assistance
Input schema
{
  "type": "object",
  "properties": {
    "prompt": {
      "type": "string",
      "description": "The coding task, question, or analysis request"
    },
    "sessionId": {
      "type": "string",
      "description": "Optional session ID for conversational context. Note: when resuming a session, sandbox/fullAuto/workingDirectory parameters are not applied (CLI limitation)"
    },
    "resetSession": {
      "type": "boolean",
      "description": "Reset the session history before processing this request"
    },
    "model": {
      "type": "string",
      "description": "Specify which model to use (defaults to gpt-5.3-codex). Options: gpt-5.3-codex, gpt-5.2-codex, gpt-5.1-codex, gpt-5.1-codex-max, gpt-5-codex, gpt-4o, gpt-4, o3, o4-mini"
    },
    "reasoningEffort": {
      "type": "string",
      "enum": [
        "none",
        "minimal",
        "low",
        "medium",
        "high",
        "xhigh"
      ],
      "description": "Control reasoning depth (none < minimal < low < medium < high < xhigh)"
    },
    "sandbox": {
      "type": "string",
      "enum": [
        "read-only",
        "workspace-write",
        "danger-full-access"
      ],
      "description": "Sandbox policy for shell command execution. read-only: no writes allowed, workspace-write: writes only in workspace, danger-full-access: full system access (dangerous)"
    },
    "fullAuto": {
      "type": "boolean",
      "description": "Enable full-auto mode: sandboxed automatic execution without approval prompts (equivalent to -a on-request --sandbox workspace-write)"
    },
    "workingDirectory": {
      "type": "string",
      "description": "Working directory for the agent to use as its root (passed via -C flag)"
    },
    "callbackUri": {
      "type": "string",
      "description": "Static MCP callback URI to pass to Codex via environment (if provided)"
    }
  },
  "required": [
    "prompt"
  ]
}
Output schema
{
  "type": "object",
  "properties": {
    "threadId": {
      "type": "string"
    }
  }
}
Annotations
{
  "title": "Execute Codex CLI",
  "readOnlyHint": false,
  "destructiveHint": true,
  "idempotentHint": false,
  "openWorldHint": true
}
Writes · Destructive
helpGet Codex CLI help information
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
Annotations
{
  "title": "Get Help",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
Read only · Non-destructive
listSessionsList all active conversation sessions with metadata
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
Annotations
{
  "title": "List Sessions",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
Read only · Non-destructive
pingTest MCP server connection
Input schema
{
  "type": "object",
  "properties": {
    "message": {
      "type": "string",
      "description": "Message to echo back"
    }
  },
  "required": []
}
Annotations
{
  "title": "Ping Server",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
Read only · Non-destructive
reviewRun a code review against the current repository using Codex CLI
Input schema
{
  "type": "object",
  "properties": {
    "prompt": {
      "type": "string",
      "description": "Custom review instructions or focus areas (cannot be used with uncommitted=true; use base/commit review instead)"
    },
    "uncommitted": {
      "type": "boolean",
      "description": "Review staged, unstaged, and untracked changes (working tree) - cannot be combined with custom prompt"
    },
    "base": {
      "type": "string",
      "description": "Review changes against a specific base branch (e.g., \"main\", \"develop\")"
    },
    "commit": {
      "type": "string",
      "description": "Review the changes introduced by a specific commit SHA"
    },
    "title": {
      "type": "string",
      "description": "Optional title to display in the review summary"
    },
    "model": {
      "type": "string",
      "description": "Specify which model to use for the review (defaults to gpt-5.3-codex)"
    },
    "workingDirectory": {
      "type": "string",
      "description": "Working directory to run the review in (passed via -C as a global Codex option)"
    }
  },
  "required": []
}
Annotations
{
  "title": "Code Review",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
Read only · Non-destructive
websearchPerform web search using Codex CLI with web search enabled
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "The search query to execute"
    },
    "numResults": {
      "type": "integer",
      "description": "Number of search results to return (1-50, default: 10)",
      "minimum": 1,
      "maximum": 50
    },
    "searchDepth": {
      "type": "string",
      "enum": [
        "basic",
        "full"
      ],
      "description": "Search depth: basic (faster) or full (deeper analysis, default: basic)"
    }
  },
  "required": [
    "query"
  ]
}
Annotations
{
  "title": "Web Search",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
Read only · Non-destructive

Resources 0

Resource templates 0

Prompts 0

Let’s talk about MCP security.

Share your details and our security team will contact you.