claude-codex
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@claude-codexchat with claude about machine learning"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Claude Codex
버전 0.2.0 · OpenAI Codex Desktop / GUI용 플러그인 + MCP stdio leaf.
Anthropic Claude를 Codex에서 직접 호출합니다. 멀티 프로바이더 오케스트레이션의 실행부(leaf)로 쓰도록 설계했습니다.
비공식 프로젝트. Claude / Anthropic 상표는 Anthropic 소유입니다.
Hermes 플러그인이 아닙니다. hermes-agent에서 Messages API 변환 아이디어만 참고했습니다. 대응표: docs/SOURCE_MAP.md
빠른 시작
# 마켓플레이스 등록
codex plugin marketplace add "/path/to/Claude Codex"
codex plugin add claude-codex@claude-codex
# 동의
python3 scripts/claude_codex_consent.py grant --i-understand-and-consent
# API 키
export ANTHROPIC_API_KEY=sk-ant-...
# 진단
python3 scripts/claude_codex_doctor.pyRelated MCP server: SwiftOpenAI MCP Server
구독 로그인 (Claude Max/Pro)
기본 인증은 Claude Code 구독 OAuth입니다 (API key 아님).
claude auth login --claudeai
# macOS Keychain → 파일 미러 (권장)
python3 scripts/claude_codex_login.py mirror-keychain
python3 scripts/claude_codex_consent.py grant --i-understand-and-consent
python3 scripts/claude_codex_login.py status구독 할당량(plan lane)을 쓰려면 hermes-claude-auth와 동일한 Claude Code 요청 핑거프린트가 OAuth 요청에 자동 적용됩니다 (Meapri/hermes-claude-auth).
API 키 강제: CLAUDE_CODEX_AUTH_MODE=api_key
MCP 도구
Tool | 역할 |
| 동의 상태 |
| API 키 준비 여부 (시크릿 없음) |
| Messages API 채팅 |
| 모델 목록 |
| 로컬 진단 |
환경 변수
변수 | 의미 |
| Anthropic API 키 (권장) |
| 기본 |
| 프로세스 단위 동의 |
| 기본 모델 오버라이드 |
| 설정 디렉터리 오버라이드 |
개발
python3 -m venv .venv
.venv/bin/pip install -e '.[dev]'
.venv/bin/pytest라이선스
Available Tools
8 toolsclaude_codex_chatC
Chat via Anthropic Messages. Prefers Claude subscription OAuth (Claude Code login) with plan-lane fingerprint; falls back to API key.
| Name | Required | Description | Default |
|---|---|---|---|
| model | No | ||
| prompt | No | ||
| system | No | ||
| messages | No | ||
| max_tokens | No | ||
| temperature | No | ||
| timeout_sec | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must carry full burden. It discloses authentication fallback behavior but fails to explain other important behavioral aspects such as whether responses are streamed, error handling, idempotency, or side effects. Given zero annotations, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with core purpose. However, conciseness is undermined by missing critical information; it is under-specified rather than appropriately concise. Every sentence is needed but still insufficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With 7 parameters, no schema descriptions, and no output schema, the description is severely incomplete. It fails to explain how to construct requests, what the response format is, or any constraints beyond those in the schema (e.g., timeout max). Essential for successful invocation is absent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% with 7 parameters (model, prompt, system, messages, max_tokens, temperature, timeout_sec). The description adds no meaning to any parameter. The agent must infer semantics solely from parameter names, which is unreliable for complex parameters like messages array.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Chat via Anthropic Messages' clearly states the verb (chat) and resource (Anthropic Messages). The tool name 'claude_codex_chat' reinforces this. It distinguishes from siblings as no other sibling is a chat tool. However, it could be more explicit about sending messages to Claude through the Messages API.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. The description only mentions authentication preferences (prefers OAuth, falls back to API key), which is behavioral rather than usage context. There is no when-to-use or when-not-to-use information relative to sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
claude_codex_consent_statusA
Read explicit-consent state. Cannot grant consent.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, description carries full burden. It explicitly declares the tool is read-only and cannot grant consent, providing essential behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences convey all necessary information without wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Lacks mention of return value format (e.g., boolean), which would help agents use the tool correctly without an output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, so baseline score of 4 applies. Description does not need to add parameter info.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states verb 'Read' and resource 'explicit-consent state', distinguishing it from sibling tools like chat or login.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states it cannot grant consent, but does not specify when to prefer this over other tools. However, no sibling tools overlap, making usage clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
claude_codex_doctorB
Quick local diagnosis: consent, credentials, default model.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden for behavioral disclosure. It names what is diagnosed but does not describe what actions are taken, what data is returned, or any side effects. 'Quick local diagnosis' is too vague to inform an agent of behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise at 4 words, front-loaded with the key verb and subjects. Every word earns its place, though it could benefit from slightly more detail without losing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, no annotations, and zero parameters, the description is too sparse. It leaves the agent unclear about what information the diagnosis provides, how to interpret results, or whether any side effects occur.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline is 4. The description adds context beyond the empty schema by specifying the diagnostic areas (consent, credentials, default model), which helps an agent understand what to expect.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states it performs a 'quick local diagnosis' of 'consent, credentials, default model,' which clearly identifies the tool's purpose and resources. However, it does not differentiate from siblings like claude_codex_consent_status or claude_codex_provider_status, which may overlap.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus siblings. The phrase 'quick local diagnosis' implies a broad check, but there are no exclusions or alternatives mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
claude_codex_list_modelsC
List curated (and optionally live) models.
| Name | Required | Description | Default |
|---|---|---|---|
| probe | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. However, it does not explain what 'live models' means, whether it makes network calls, or how the 'probe' parameter affects behavior. This is insufficient for safe agent decision-making.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
While the description is short (one sentence), it sacrifices essential information. A concise description should still cover parameter usage and return value. This is under-specified, not efficiently informative.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of annotations, no output schema, and only one parameter, the description must provide context about output format and parameter effect. It fails to do so, leaving the agent with insufficient information to invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 1 parameter ('probe') with 0% schema description coverage, and the description does not explain its semantics. The agent cannot understand how to use the parameter or what effect it has.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'List' and resource 'models', and adds the nuance 'curated (and optionally live)'. It effectively distinguishes the tool from siblings which involve chat, consent, doctor, login, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. There is no mention of when to use 'probe', or when to prefer other tools. The description does not provide context for appropriate usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
claude_codex_login_refreshB
Refresh Claude Code OAuth access token using stored refresh token.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided. Description only mentions the operation but does not disclose side effects (e.g., invalidating old token), auth requirements, or rate limits. Minimal behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, concise and to the point. However, could be slightly more informative without losing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with no parameters, the description is adequate but missing behavioral details like success/failure outcomes or error conditions. Not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, and schema coverage is 100%. Baseline for 0 params is 4. Description adds no parameter info but its absence is appropriate given no params.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the action (Refresh), resource (Claude Code OAuth access token), and mechanism (using stored refresh token). No ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like claude_codex_login_status. No mention of prerequisites or conditions (e.g., token expiration).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
claude_codex_login_statusA
Claude Code / subscription OAuth credential status (no secrets).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses that no secrets are exposed, which is an important safety trait. However, with no annotations, further behavioral details (e.g., idempotency, side effects) are missing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single concise phrase, no wasted words, front-loaded with key identity and caveat.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless status tool, the description is nearly complete. Could optionally hint at output structure, but not required given simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, so schema coverage is 100%. Description adds context by clarifying it's about OAuth credentials and safe (no secrets).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it returns OAuth credential status, and the phrase 'no secrets' distinguishes it from sibling tools like claude_codex_login_refresh which might handle credentials.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implied usage is checking login status, but no explicit guidance on when to use vs. alternatives like consent_status or provider_status.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
claude_codex_mirror_keychainB
macOS: copy Claude Code Keychain credentials into ~/.claude/.credentials.json.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries full burden. It states the action but does not disclose whether the operation overwrites, creates, or requires authentication, nor any potential side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence with no wasted words. Efficiently conveys the tool's purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is adequate for a simple no-parameter tool but lacks details on overwrite behavior, permissions, or error conditions. Could be more complete with a note about keychain access requirements.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, so baseline 3 applies. The description adds no parameter information beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (copy) and the specific resource (Claude Code Keychain credentials) and destination (~/.claude/.credentials.json). It is distinct from sibling tools which handle chat, login, providers, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. It does not mention prerequisites (e.g., keychain access) or situations where it should not be used.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
claude_codex_provider_statusB
Check credentials and readiness without exposing secrets.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that the tool does not expose secrets, which is a key behavioral trait. However, with no annotations provided, it does not cover other important aspects like read-only nature, rate limits, or side effects. The single disclosure adds some value but is insufficient for full transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence. It contains no fluff and every word contributes to the purpose. Highly efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and no parameters, the description is minimally complete. It explains the what and the behavioral constraint, but does not describe the output format, what 'readiness' means, or how the result should be interpreted. This is adequate but leaves room for confusion.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are no parameters, so the schema coverage is 100%. The description does not need to add parameter details. It adds meaning by stating the tool checks 'credentials and readiness', which goes beyond the empty schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks credentials and readiness without exposing secrets. It specifies a verb ('check') and a resource ('credentials and readiness'). However, among siblings like claude_codex_login_status and claude_codex_consent_status, it does not fully distinguish what 'provider' refers to, leaving some ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives. The description does not mention when not to use it or provide context about prerequisites or typical scenarios. Usage is implied but not clarified.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
8 tool updates
v0.2.0- First observed
claude_codex_chat - First observed
claude_codex_consent_status - First observed
claude_codex_doctor - First observed
claude_codex_list_models - First observed
claude_codex_login_refresh - First observed
claude_codex_login_status - First observed
claude_codex_mirror_keychain - First observed
claude_codex_provider_status
TDQS
Tools have largely distinct purposes, with only minor overlap between the diagnostic tool and individual status tools, but descriptions clarify the differences.
All tools share the 'claude_codex_' prefix, but the suffix pattern varies inconsistently between verb_noun, noun_noun, and single-word formats.
8 tools is well-scoped for managing Claude Code authentication, chat, and diagnostics; each tool serves a clear need.
Covers core read and diagnostic operations but lacks write tools for granting consent or updating credentials, leaving some workflow dead ends.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Hosted MCP server connecting claude.ai, ChatGPT and other AI apps to your own computer
MCP server unifying ERPs, CRMs, APIs and knowledge base for Claude, ChatGPT and Gemini.
Augments MCP Server - A comprehensive framework documentation provider for Claude Code
- QuallaaOAuthcom.quallaa
Talk to your public-facing AI from any MCP client — Claude, ChatGPT, Cursor, Cline, Windsurf.
Related MCP Servers
- AlicenseBqualityCmaintenanceA Model Context Protocol (MCP) server that lets you seamlessly use OpenAI's models right from Claude.128176MIT
- AlicenseNot gradedqualityCmaintenanceA universal server that enables MCP-compatible clients (like Claude Desktop, Cursor, VS Code) to access OpenAI's APIs for chat completions, image generation, embeddings, and model listing through a standardized interface.157MIT
- AlicenseNot gradedqualityFmaintenanceAn MCP server that allows Claude Code to interact with the OpenAI Codex CLI.2921MIT
- AlicenseAqualityCmaintenanceAn MCP server that enables any AI agent to call Claude using your existing Max/Pro subscription via OAuth, avoiding additional API billing.11MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Meapri/claude-codex'
If you have feedback or need assistance with the MCP directory API, please join our Discord server