1.4.10npm · codex-mcp-server · current release
Observed 2026-08-15T19:03:05.598Z using mcpSecurity-inventory. Status: succeeded. Negotiated protocol: 2025-06-18.
{
"tools": {}
}| Tool | Category | Annotations | Risk |
|---|---|---|---|
codexExecute Codex CLI in non-interactive mode for AI assistanceInput schema{
"type": "object",
"properties": {
"prompt": {
"type": "string",
"description": "The coding task, question, or analysis request"
},
"sessionId": {
"type": "string",
"description": "Optional session ID for conversational context. Note: when resuming a session, sandbox/fullAuto/workingDirectory parameters are not applied (CLI limitation)"
},
"resetSession": {
"type": "boolean",
"description": "Reset the session history before processing this request"
},
"model": {
"type": "string",
"description": "Specify which model to use (defaults to gpt-5.3-codex). Options: gpt-5.3-codex, gpt-5.2-codex, gpt-5.1-codex, gpt-5.1-codex-max, gpt-5-codex, gpt-4o, gpt-4, o3, o4-mini"
},
"reasoningEffort": {
"type": "string",
"enum": [
"none",
"minimal",
"low",
"medium",
"high",
"xhigh"
],
"description": "Control reasoning depth (none < minimal < low < medium < high < xhigh)"
},
"sandbox": {
"type": "string",
"enum": [
"read-only",
"workspace-write",
"danger-full-access"
],
"description": "Sandbox policy for shell command execution. read-only: no writes allowed, workspace-write: writes only in workspace, danger-full-access: full system access (dangerous)"
},
"fullAuto": {
"type": "boolean",
"description": "Enable full-auto mode: sandboxed automatic execution without approval prompts (equivalent to -a on-request --sandbox workspace-write)"
},
"workingDirectory": {
"type": "string",
"description": "Working directory for the agent to use as its root (passed via -C flag)"
},
"callbackUri": {
"type": "string",
"description": "Static MCP callback URI to pass to Codex via environment (if provided)"
}
},
"required": [
"prompt"
]
}Output schema{
"type": "object",
"properties": {
"threadId": {
"type": "string"
}
}
}Annotations{
"title": "Execute Codex CLI",
"readOnlyHint": false,
"destructiveHint": true,
"idempotentHint": false,
"openWorldHint": true
} | — | Writes · Destructive | — |
helpGet Codex CLI help informationInput schema{
"type": "object",
"properties": {},
"required": []
}Annotations{
"title": "Get Help",
"readOnlyHint": true,
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": false
} | — | Read only · Non-destructive | — |
listSessionsList all active conversation sessions with metadataInput schema{
"type": "object",
"properties": {},
"required": []
}Annotations{
"title": "List Sessions",
"readOnlyHint": true,
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": false
} | — | Read only · Non-destructive | — |
pingTest MCP server connectionInput schema{
"type": "object",
"properties": {
"message": {
"type": "string",
"description": "Message to echo back"
}
},
"required": []
}Annotations{
"title": "Ping Server",
"readOnlyHint": true,
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": false
} | — | Read only · Non-destructive | — |
reviewRun a code review against the current repository using Codex CLIInput schema{
"type": "object",
"properties": {
"prompt": {
"type": "string",
"description": "Custom review instructions or focus areas (cannot be used with uncommitted=true; use base/commit review instead)"
},
"uncommitted": {
"type": "boolean",
"description": "Review staged, unstaged, and untracked changes (working tree) - cannot be combined with custom prompt"
},
"base": {
"type": "string",
"description": "Review changes against a specific base branch (e.g., \"main\", \"develop\")"
},
"commit": {
"type": "string",
"description": "Review the changes introduced by a specific commit SHA"
},
"title": {
"type": "string",
"description": "Optional title to display in the review summary"
},
"model": {
"type": "string",
"description": "Specify which model to use for the review (defaults to gpt-5.3-codex)"
},
"workingDirectory": {
"type": "string",
"description": "Working directory to run the review in (passed via -C as a global Codex option)"
}
},
"required": []
}Annotations{
"title": "Code Review",
"readOnlyHint": true,
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": true
} | — | Read only · Non-destructive | — |
websearchPerform web search using Codex CLI with web search enabledInput schema{
"type": "object",
"properties": {
"query": {
"type": "string",
"description": "The search query to execute"
},
"numResults": {
"type": "integer",
"description": "Number of search results to return (1-50, default: 10)",
"minimum": 1,
"maximum": 50
},
"searchDepth": {
"type": "string",
"enum": [
"basic",
"full"
],
"description": "Search depth: basic (faster) or full (deeper analysis, default: basic)"
}
},
"required": [
"query"
]
}Annotations{
"title": "Web Search",
"readOnlyHint": true,
"destructiveHint": false,
"idempotentHint": true,
"openWorldHint": true
} | — | Read only · Non-destructive | — |