
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
codex-cli-mcp-tool
Advanced tools
An MCP server that allows Claude Code to interact with the OpenAI Codex CLI. If you have a ChatGPT subscription and a claude code subscription, you can use this tool to get the benefits of both, as a $20 ChatGPT subscription gives you access to GPT-5 for free in Codex CLI.
Install Codex CLI (required):
npm install -g @openai/codex
Add to Claude Code using npx:
claude mcp add codex-cli-mcp-tool -- npx -y codex-cli-mcp-tool
Or install globally first:
npm install -g codex-cli-mcp-tool
Configure Authentication:
# Option 1: Use API key
export OPENAI_API_KEY=your-api-key
# Option 2: Login with ChatGPT account
codex login
Execute Codex with comprehensive parameter support for code analysis, generation, and assistance.
Parameters:
prompt (required): Your query or instructionmodel (optional): gpt-5 (default and only supported model)sandbox (optional): read-only, workspace-write, danger-full-accessapproval (optional): untrusted, on-failure, on-request, neverimage (optional): Image file path(s) to includeconfig (optional): Configuration overridestimeout (optional): Maximum execution timeExample:
ask-codex "Explain this code: @main.py" sandbox="read-only"
Non-interactive Codex execution for automation workflows.
Parameters:
prompt (required): Command or instructionmodel (optional): Always gpt-5sandbox (optional): Sandbox modetimeout (optional): Execution timeoutApply the latest Codex-generated diff to your git repository.
Parameters:
dryRun (optional): Preview changes without applyingvalidate (optional): Validate before applyingping: Test MCP connectionhelp: Show detailed help informationversion: Display version informationOPENAI_API_KEY=sk-... # OpenAI API key
CODEX_MODEL=gpt-5 # Default model
CODEX_SANDBOX_MODE=read-only # Default sandbox mode
[model]
provider = "openai"
default = "gpt-5"
reasoning_effort = "medium"
[sandbox]
default_mode = "read-only"
permissions = ["disk-read-access"]
[approval]
policy = "untrusted"
trusted_commands = ["ls", "cat", "grep"]
ask-codex "Review this function for security issues: @auth.py"
ask-codex "Generate unit tests for the User class" sandbox="workspace-write"
ask-codex "Fix the bug in login function" approval="on-request"
ask-codex "Create a new React component for user profile" sandbox="workspace-write"
ask-codex "Refactor this code to use async/await"
apply-diff validate=true
Codex CLI not found:
npm install -g @openai/codex
Authentication failed:
# Set API key
export OPENAI_API_KEY=your-key
# Or login
codex login
Permission denied:
Rate limits:
Enable debug logging:
DEBUG=true codex-cli-mcp-tool
git clone <repository>
cd codex-cli-tool
npm install
npm run build
npm run dev
npm test
npm run lint
This project is based on the excellent Gemini MCP Tool by jamubc. We adapted their architecture and patterns to create this Codex CLI integration.
MIT License - see LICENSE file for details.
FAQs
MCP server for OpenAI Codex CLI integration
The npm package codex-cli-mcp-tool receives a total of 40 weekly downloads. As such, codex-cli-mcp-tool popularity was classified as not popular.
We found that codex-cli-mcp-tool demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.