Openai Codex MCP
@openai/codex · by agency-ai-solutions
An MCP server to communicated with, use, and wrap the API for the OpenAI Codex CLI tool.
1 open CVE
No license
Stale
Last commit 496d ago
Works with most clients
Transport: stdio
9 tools
Grade F
MCPpedia last refreshed this data
This server has been archived and is no longer actively maintained.
Openai Codex MCP is an MCP server that an MCP server to communicated with, use, and wrap the API for the OpenAI Codex CLI tool. Its tool list has not been published yet over stdio, requires no API key, and scores 35/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"openai-codex-mcp": {
"args": [
"-y",
"@openai/codex"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/openai-codex-mcp)
Read me
What Openai Codex Mcp does
An MCP server to wrap the OpenAI Codex CLI tool for use with Claude Code.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@openai/codex' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
35/100across 5 weighted dimensions
0255075100
11
14
10
−65
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 open1 fixed
CVE-2025-61260criticalCVSS 9.8
OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files
A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads project-local .env and .codex/config.toml files without requiring user confirmation, allowing attackers to embed arbitrary commands that execute immediately.
Affected:
>= 0source →CVE-2025-59532high · fixed
Codex has sandbox bypass due to bug in path configuration logic
Due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated `cwd` as the sandbox’s writable root, including paths outside of the folder where the user started their session. This logic bypassed the intended workspace boundary and enables arbitrary file writes and command execution where the Codex process has permissions - this did not impact the network-disabled sandbox restriction. **Remediation** We released a patch in Codex CLI **0.39.0** that canonicalizes and
Inventory
Tools (9)
Click any tool to inspect its schema.
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Openai Codex Mcp safe to use?
- Openai Codex Mcp has 1 known CVE tracked by MCPpedia. You can verify these on OSV.dev by searching for "@openai/codex". Review the Security section above for details before installing.
- How do I install Openai Codex Mcp?
- Openai Codex Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Openai Codex Mcp do?
- Openai Codex Mcp provides 9 tools: write_code, explain_code, debug_code, Name, Description and 4 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Openai Codex Mcp?
- Openai Codex Mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
- Is Openai Codex Mcp actively maintained?
- Openai Codex Mcp is not actively maintained — last commit was 496 days ago. It has 51 GitHub stars.
Related
Similar servers
Others in ai-ml / developer-tools
Dsh MCP Client97MCP client bridge: connects to MCP servers and registers their tools on ctx.tools
196.7k 4
Gpt Researcher97An autonomous agent that conducts deep research on any data using any LLM providers
29.2k 5
Context797Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
61.2k 2
Modelcontextprotocol96The official MCP server implementation for the Perplexity API Platform
2.5k 4
MCP Security Weekly
Get CVE alerts and security updates for Openai Codex Mcp and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.