← Back to search

codex-mcp-server

GitHub Actions Scanned 25d ago

MCP server wrapper for OpenAI Codex CLI

npm ↗
? Not scanned yet

Versions

1.4.10latest
Apr 10, 2026
1.4.2
Mar 7, 2026
1.4.1
Mar 7, 2026
1.4.0
Feb 6, 2026
1.3.5
Feb 5, 2026
+ show 22 moreshow less
1.3.4
Jan 25, 2026
1.3.3
Jan 24, 2026
1.3.2
Jan 24, 2026
1.3.1
Jan 19, 2026
1.3.0
Jan 17, 2026
1.2.4
Jan 15, 2026
1.2.2
Dec 25, 2025
1.2.1
Dec 18, 2025
1.2.0
Dec 18, 2025
1.1.4
Dec 15, 2025
1.1.3
Nov 29, 2025
1.1.2
Nov 26, 2025
1.1.1
Oct 29, 2025
1.1.0
Oct 29, 2025
1.0.3
Sep 29, 2025
1.0.2
Sep 22, 2025
1.0.1
Sep 21, 2025
0.1.1
Sep 15, 2025
0.1.0
Aug 18, 2025
0.0.6
Aug 18, 2025
0.0.5
Aug 18, 2025
1.0.0
Aug 18, 2025

Tools 0

No tools indexed yet.

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 12

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 503 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%