mcpField
C
Codex Mcp Server

Codex Mcp Server

Local
github.com/x51xxxDeveloper Tools24Updated 4w ago

About Codex Mcp Server

Codex MCP Server is an MCP server that connects Claude, Cursor and other AI assistants to the OpenAI Codex CLI for code analysis, review and refactoring. It targets developers who want to call Codex CLI from MCP clients, with multi-turn sessions and sandboxed edits.

Key features

  1. 01File analysis using @ references
  2. 02Multi-turn sessions with workspace isolation
  3. 03Sandbox and approval policy controls
  4. 04Structured OLD/NEW patch output
  5. 05Local Ollama and LM Studio model support
  6. 06Batch runs and verify-and-retry workflows

Use cases

  1. 01Asking Claude or Cursor to analyze project architecture and dependencies
  2. 02Running non-interactive code reviews on pending changes
  3. 03Applying batch refactoring as structured patches

MCP support

The project runs as an MCP server and exposes tools such as ask-codex, review-changes and do-act to MCP clients, executing the actual work through Codex CLI.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
"mcpServers": {
"codex-mcp-tool": {
"command": "npx",
"args": [
"-y",
"@trishchuk/codex-mcp-tool"
],
"env": {
"CODEX_MCP_CWD": "<CODEX_MCP_CWD>",
"CODEX_SESSION_TTL_MS": "<CODEX_SESSION_TTL_MS>",
"CODEX_MAX_SESSIONS": "<CODEX_MAX_SESSIONS>"
}
}
}
}
Run commandnpx -y @trishchuk/codex-mcp-tool
Environment variables to set
CODEX_MCP_CWDOverride working directory for all tool calls
CODEX_SESSION_TTL_MSSession time-to-live in milliseconds (default: 86400000 = 24h)
CODEX_MAX_SESSIONSMaximum concurrent sessions (default: 50)

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@trishchuk/codex-mcp-tool2.2.0

Tools

13

Saved tool list · updated 3w ago

ParameterTypeRequiredDescription
promptstringYesTask or question. Use @ to include files (e.g., '@largefile.ts explain').
modelstringNoOptional model override. Known: gpt-5.6, gpt-5.6-sol, gpt-5.6-terra, gpt-5.6-luna, gpt-5.5, gpt-5.4, gpt-5.4-mini. If omitted, uses your Codex CLI default (~/.codex/config.toml). Specify only to override.
sandboxbooleanNoQuick automation mode: enables workspace-write with approval=never. Sandboxing remains active.
fullAutobooleanNoCompatibility alias for workspace-write with approval=never (not --yolo)
approvalPolicyenumNoApproval: never, on-request, untrustednever | on-request | untrusted
approvalenumNoApproval policy: untrusted, on-request, nevernever | on-request | untrusted
sandboxModeenumNoAccess: read-only, workspace-write, danger-full-accessread-only | workspace-write | danger-full-access
yolobooleanNo⚠️ Bypass all safety (dangerous)
cdstringNoWorking directory
workingDirstringNoWorking directory for execution
changeModebooleanNoReturn structured OLD/NEW edits for refactoring
chunkIndexnumberNoChunk index (1-based)
chunkCacheKeystringNoCache key for continuation
imageanyNoOptional image file path(s) to include with the prompt
configanyNoConfiguration overrides as 'key=value' string or object
profilestringNoConfiguration profile to use from ~/.codex/config.toml
timeoutnumberNoMaximum execution time in milliseconds (optional)
includeThinkingbooleanNoInclude reasoning/thinking section in response
includeMetadatabooleanNoInclude configuration metadata in response
searchbooleanNoEnable web search using native --search flag (v0.52.0+). Requires network access - automatically sets sandbox to workspace-write if not specified.
ossbooleanNoUse local Ollama server (convenience for -c model_provider=oss). Requires Ollama running locally. Automatically sets sandbox to workspace-write if not specified.
localProviderenumNoSpecify which local provider to use (lmstudio or ollama). Automatically enables --oss if not set. If omitted with --oss, uses config default or shows selection.lmstudio | ollama
enableFeaturesarrayNoEnable feature flags (repeatable). Equivalent to -c features.<name>=true
disableFeaturesarrayNoDisable feature flags (repeatable). Equivalent to -c features.<name>=false
addDirsarrayNoAdditional writable directories beyond workspace (e.g., ["/tmp", "/var/log"]). Useful for monorepos and multi-directory projects.
toolOutputTokenLimitnumberNoMaximum tokens for tool outputs (100-10,000). Controls response verbosity.
reasoningEffortenumNoReasoning depth. Omit to use the CLI default. max/ultra are model-dependent GPT-5.6 options; ultra may delegate to subagents.low | medium | high | xhigh | max | ultra
sessionIdstringNoSession ID for conversation continuity. Enables native Codex resume.
resetSessionbooleanNoClear session context before execution. Starts fresh conversation.
outputSchemaanyNoJSON Schema path or inline schema to constrain output format (Codex CLI v0.95.0+)
personalityenumNoCommunication style: pragmatic (concise, machine-friendly) or friendly (conversational). Codex CLI v0.94.0+pragmatic | friendly
skipGitRepoCheckbooleanNoSkip git repository validation. Useful for non-git directories (Codex CLI v0.75.0+)
outputLastMessagestringNoWrite final Codex message to file path. Useful for CI/CD result capture (Codex CLI v0.95.0+)
strictConfigbooleanNoFail when config.toml contains fields unknown to the installed Codex CLI
ephemeralbooleanNoRun without persisting Codex session files to disk
ignoreUserConfigbooleanNoIgnore $CODEX_HOME/config.toml for this run; authentication is still loaded
ignoreRulesbooleanNoIgnore user and project execpolicy .rules files for this run
bypassHookTrustbooleanNoDANGEROUS: run enabled hooks without persisted hook trust
responseModeenumNoResponse verbosity: "clean" returns only the final answer (default), "full" returns the complete execution log including thinking, tool calls, and agent activityclean | full

Details

From the project README

Codex MCP Server

GitHub Release npm version npm downloads License: MIT

MCP server connecting Claude/Cursor to Codex CLI. Enables code analysis via @ file references, multi-turn conversations, sandboxed edits, and structured change mode.

Features

  • File Analysis — Reference files with @src/, @package.json syntax
  • Multi-Turn Sessions — Conversation continuity with workspace isolation
  • Native Resume — Uses codex resume for context preservation (CLI v0.36.0+)
  • Local OSS Models — Run with Ollama or LM Studio via localProvider
  • Web Search — Research capabilities with search: true
  • Sandbox Mode — Safe automation with explicit sandbox and approval policies
  • Change Mode — Structured OLD/NEW patch output for refactoring
  • Brainstorming — SCAMPER, design-thinking, lateral thinking frameworks
  • Health Diagnostics — CLI version, features, and session monitoring
  • Cross-Platform — Windows, macOS, Linux fully supported

Quick Start

claude mcp add codex-cli -- npx -y @trishchuk/codex-mcp-tool

Prerequisites: Node.js 18+, Codex CLI installed and authenticated.

Configuration
{
  "mcpServers": {
    "codex-cli": {
      "command": "npx",
      "args": ["-y", "@trishchuk/codex-mcp-tool"]
    }
  }
}

Config locations: macOS: ~/Library/Application Support/Claude/claude_desktop_config.json | Windows: %APPDATA%\Claude\claude_desktop_config.json

Usage Examples

// File analysis
'explain the architecture of @src/';
'analyze @package.json and list dependencies';

// With specific model
'use codex with model gpt-5.6-sol to analyze @algorithm.py';

// Multi-turn conversations (v1.4.0+)
'ask codex sessionId:"my-project" prompt:"explain @src/"';
'ask codex sessionId:"my-project" prompt:"now add error handling"';

// Brainstorming
'brainstorm ways to optimize CI/CD using SCAMPER method';

// Sandbox mode
'use codex sandbox:true to create and run a Python script';

// Web search
'ask codex search:true prompt:"latest TypeScript 5.7 features"';

// Local OSS model (Ollama)
'ask codex localProvider:"ollama" model:"qwen3:8b" prompt:"explain @src/"';

Tools

ToolDescription
ask-codexExecute Codex CLI with files, models, sessions, and safety controls
batch-codexRun multiple atomic Codex tasks sequentially or concurrently
review-changesRun the native non-interactive Codex review command
do-actExecute, verify with a shell command, and retry fixes
image-genGenerate or edit images with Codex's built-in image_gen tool
brainstormGenerate ideas with structured creative frameworks
list-sessionsView, delete, or clear MCP conversation mappings
list-skillsList skills visible from the selected workspace
healthDiagnose CLI installation, version, features, and sessions
fetch-chunkRetrieve a chunk from cached change-mode output
pingTest the MCP connection
helpReturn current codex --help output
versionReport Codex CLI, Node.js, platform, and package versions
timeout-testExercise keepalive and timeout behavior

Image generation

image-gen drives Codex's built-in image_gen tool, so it uses your ChatGPT login and needs no OPENAI_API_KEY. That tool only accepts a prompt and reference image paths: Codex picks the image model and pixel size, and there are no size, quality, format or mask arguments. image-gen therefore puts all steering into a structured prompt (use case, asset type, style, composition, exact text, reference roles, edit invariants, aspect ratio, presets) and tells the Codex host model to relay it instead of improvising.

// New image, 16:9, exact Cyrillic headline, copied into the project
'image-gen prompt:"YouTube cover about AI coding agents" aspect:"wide" text:"АГЕНТИ БЕЗ ХАОСУ" presets:["thumbnail","exact-text"] outputPath:"assets/cover.png"';

// Edit: change only the headline, keep everything else
'image-gen editImage:"assets/cover.png" prompt:"Replace the headline text" text:"ЧАСТИНА 2" preserve:["people and background"] outputPath:"assets/cover.png"';

Images are saved by Codex under $CODEX_HOME/generated_images/<thread>/ and copied to outputPath when given; an existing file is kept and the copy is written as a -v2 sibling unless overwrite: true. The result reports each file's dimensions and alpha channel, so a transparentBackground request that came back opaque is flagged.

Models

By default the model parameter is omitted and Codex CLI applies the default model from your ~/.codex/config.toml (for example model = "gpt-6.1-sol"). Pass model only when you need to override the configured default for a single call. Reasoning depth is calibrated per tool:

  • ask-codex — uses the Codex CLI default reasoning (medium). Increase it only when the task needs more planning or checking.
  • brainstorm, do-act, review-changes — default reasoningEffort: "high" (creative ideation, act-check-fix loops, and code review benefit from deeper reasoning).
ModelRecommendation
gpt-6.1-solLatest workhorse for coding and everyday work (CLI 0.159+)
gpt-6-astraFrontier intelligence for the most demanding work
gpt-6-solPrevious-generation workhorse
gpt-6-lunaFast and affordable; easier, repeatable tasks
gpt-5.6-solOlder-generation workhorse
gpt-5.6-terraOlder balanced model for straightforward work
gpt-5.6-lunaOlder fast, efficient model
gpt-5.5Legacy — Codex steers callers to gpt-5.6-sol

Sol, Astra and Terra models expose max and ultra reasoning; Luna models top out at max, and gpt-5.5 at xhigh. ultra may delegate work to subagents; most tasks should remain on medium or high. Pass a concrete slug — the bare moving aliases gpt-6 and gpt-5.6 are rejected by the API. gpt-6.1-sol is rejected by Codex CLI 0.157.x with the same 400 an unknown slug gets; upgrade with npm install -g @openai/codex@latest.

Key Features

Session Management (v1.4.0+)

Multi-turn conversations with workspace isolation:

{ "prompt": "analyze code", "sessionId": "my-session" }
{ "prompt": "continue from here", "sessionId": "my-session" }
{ "prompt": "start fresh", "sessionId": "my-session", "resetSession": true }

Environment:

  • CODEX_SESSION_TTL_MS - Session TTL (default: 24h)
  • CODEX_MAX_SESSIONS - Max sessions (default: 50)
Codex CLI version

Requires Codex CLI 0.95.0 or newer. On older versions the server fails with an explicit upgrade message rather than silently dropping unsupported flags. Upgrade with npm install -g @openai/codex@latest; run the health tool to see the detected version.

Troubleshooting: "codex not found"

MCP clients launched from a GUI (Dock, Finder, Start menu) inherit a minimal PATH that excludes Homebrew, nvm, and volta directories, so codex may work from a terminal but not from the app. The server searches those locations automatically; if it still cannot find the CLI, pin it explicitly:

{ "env": { "CODEX_CLI_PATH": "/opt/homebrew/bin/codex" } }

Find the value with which codex. Run the health tool to see which executable was resolved and how.

Local OSS Models (v1.6.0+)

Run with local Ollama or LM Studio instead of OpenAI:

// Ollama
{ "prompt": "analyze @src/", "localProvider": "ollama", "model": "qwen3:8b" }

// LM Studio
{ "prompt": "analyze @src/", "localProvider": "lmstudio", "model": "my-model" }

// Auto-select provider
{ "prompt": "analyze @src/", "oss": true }

Requirements: Ollama running locally with a model that supports tool calling (e.g. qwen3:8b).

Advanced Options
ParameterDescription
modelModel selection
sessionIdEnable conversation continuity
sandboxCompatibility automation: workspace-write + never
searchEnable web search
changeModeStructured OLD/NEW edits
addDirsAdditional writable directories
toolOutputTokenLimitCap response verbosity (100-10,000)
reasoningEffortlow, medium, high, xhigh, max, ultra
ossUse local OSS model provider
localProviderLocal provider: lmstudio or ollama
strictConfigFail on unknown Codex configuration keys
ephemeralDo not persist Codex session files
ignoreUserConfigIgnore $CODEX_HOME/config.toml
ignoreRulesIgnore execpolicy .rules files

CLI Compatibility

Validated against Codex CLI 0.144.3. The server keeps older feature guards, but current releases are recommended. Notable current behavior:

  • --full-auto and approval policy on-failure have been removed by Codex CLI.
  • MCP sandbox: true / fullAuto: true remain compatibility aliases for --sandbox workspace-write --ask-for-approval never; they do not bypass the sandbox.
  • Native --search is used without the deprecated web_search_request feature.
  • Current exec flags include --strict-config, --ephemeral, --ignore-user-config, and --ignore-rules.

Troubleshooting

codex --version    # Check CLI version
codex login        # Authenticate

Use health tool for diagnostics: 'use health verbose:true'

Migration

v2.5.x → v2.6.0: Codex CLI 0.159.2 model sync and a new image-gen tool. Added gpt-6.1-sol (needs Codex CLI 0.159+), gpt-6-sol and gpt-6-luna. Breaking: dropped gpt-5.4-mini, which now returns HTTP 400.

v2.4.x → v2.5.0: Codex CLI 0.153.4 compatibility pass; added gpt-6-astra. Breaking: dropped gpt-5.4 and the moving alias gpt-5.6 (both now rejected with HTTP 400), and removed the untrusted approval policy, which Codex CLI 0.153.x no longer parses.

v2.3.x → v2.4.0: Codex CLI 0.144.3 compatibility audit; added GPT-5.6 Sol/Terra/Luna, max/ultra reasoning, current exec flags, native-only search, and safe compatibility handling for the removed --full-auto flag and on-failure approval policy.

v2.2.x → v2.3.0: gpt-5.5 as new default, added gpt-5.4-mini, dropped retired models (gpt-5.3-codex-spark, gpt-5.2-codex, gpt-5.1-codex-max, gpt-5.1-codex-mini).

v2.0.x → v2.1.0: gpt-5.4 as new default model, updated fallback chain.

v1.5.x → v1.6.0: Local OSS model support (localProvider, oss), gpt-5.3-codex default model, xhigh reasoning effort.

v1.3.x → v1.4.0: New sessionId parameter, list-sessions/health tools, structured error handling. No breaking changes.

License

MIT License. Not affiliated with OpenAI.


Documentation | Issues | Inspired by jamubc/gemini-mcp-tool

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.