Agent Collab
@openai/codex · by zebbern
Run Codex and Cursor as background workers inside Claude Code. Reviews, tasks, and rescues with tracked jobs, live progress, and session handoffs.
1 open CVE
Apache-2.0 license
Actively maintained
Last commit 11d ago
Works with most clients
Transport: stdio, sse
0 tools
Grade F
MCPpedia last refreshed this data
Agent Collab is an MCP server that run Codex and Cursor as background workers inside Claude Code. Reviews, tasks, and rescues with tracked jobs, live progress, and session handoffs. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 57/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"agent-collab": {
"args": [
"-y",
"@openai/codex"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/agent-collab)
Read me
What Agent Collab does
Delegate work from Claude Code to other AI coding agents.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@openai/codex' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
57/100across 5 weighted dimensions
0255075100
17
16
14
10
−43
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 open1 fixed
CVE-2025-61260criticalCVSS 9.8
OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files
A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads project-local .env and .codex/config.toml files without requiring user confirmation, allowing attackers to embed arbitrary commands that execute immediately.
Affected:
>= 0source →CVE-2025-59532high · fixed
Codex has sandbox bypass due to bug in path configuration logic
Due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated `cwd` as the sandbox’s writable root, including paths outside of the folder where the user started their session. This logic bypassed the intended workspace boundary and enables arbitrary file writes and command execution where the Codex process has permissions - this did not impact the network-disabled sandbox restriction. **Remediation** We released a patch in Codex CLI **0.39.0** that canonicalizes and
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Agent Collab safe to use?
- Agent Collab has 1 known CVE tracked by MCPpedia. You can verify these on OSV.dev by searching for "@openai/codex". Review the Security section above for details before installing.
- How do I install Agent Collab?
- Agent Collab supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with Agent Collab?
- Agent Collab is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
- Is Agent Collab actively maintained?
- Agent Collab is actively maintained — last commit was 11 days ago. It has 32 GitHub stars.
Related
Similar servers
Others in ai-ml
Dsh MCP Client97MCP client bridge: connects to MCP servers and registers their tools on ctx.tools
196.7k 4
Gpt Researcher97An autonomous agent that conducts deep research on any data using any LLM providers
29.2k 5
Modelcontextprotocol96The official MCP server implementation for the Perplexity API Platform
2.5k 4
I
io.github.mims-harvard/tooluniverse961000+ scientific tools for AI scientists: life science, reserach, literature, and more.
1.7k 4
MCP Security Weekly
Get CVE alerts and security updates for Agent Collab and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.