MCP server for Claude Desktop to send prompts into a live Codex thread through a shared Codex app-server, preserving thread history, working directory, and model.
Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Monitored 0 days · every push re-verified
Who stands behind it
gmail.com (@buidangminh23) · Ownership Verified
Source: Glama
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
CLAUDE_BRIDGE_CWDthe process cwd The working directory the peer advertises.CLAUDE_BRIDGE_PEER_NAMEcodex mcp add claude-bridge --env =codex-desktop -- "$(command -v node)" "$PWD/src/claude-bridge.mjs"CODEX_APP_SERVER_URL"": "ws://127.0.0.1:8791"CODEX_BIN"": "/Users/<user>/.local/bin/codex",CODEX_BRIDGE_APPROVALdeny How to answer approval requests from Codex. approve is ignored unless CODEX_BRIDGE_AUTO_APPROVE_ACK=1 is also set.CODEX_BRIDGE_AUTOSTART1 0 = never spawn an app-server; one must already be running.CODEX_BRIDGE_AUTO_APPROVE_ACKCODEX_BRIDGE_APPROVAL deny How to answer approval requests from Codex. approve is ignored unless =1 is also set.CODEX_BRIDGE_EFFORTCODEX_BRIDGE_MODEL=gpt-5.6-luna =xhigh node scripts/install-claude-desktop.mjsCODEX_BRIDGE_MODELgpt-5.6-luna CODEX_BRIDGE_EFFORT=xhigh node scripts/install-claude-desktop.mjsCODEX_BRIDGE_REMAP1 0 disables cwd remapping between a shared drive and a local checkout.CODEX_BRIDGE_WORKSPACE_ROOTS$HOME and the bridge's parent directory Where to look for a project by name, most preferred first, separated by : (; on Windows). Setting it replaces the derived roots rather than adding to them.CODEX_THREAD_IDProgramFilesWindows %LOCALAPPDATA%\Programs\OpenAI\Codex\bin\codex.exe → %APPDATA%\npm\codex.cmd → %%\nodejs\codex.cmdXDG_CONFIG_HOMELinux ${:-~/.config}/Claude/claude_desktop_config.jsonAll four hints declared on every tool
5/14 tools missing one or more hints — list_codex_threads (missing: destructiveHint, idempotentHint); read_codex_thread (missing: destructiveHint, idempotentHint); codex_bridge_status (missing: destructiveHint, idempotentHint), +2 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Shell command execution
4 child_process/subprocess calls in production code — runs shell commands (src/app-server-client.mjs:79, src/app-server-client.mjs:106, src/peer-protocol.mjs:55)
Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.
[](https://m8ven.ai/mcp/buidangminh23-codex-mcp-bridge-1ke8t1)?variant=verified to the badge URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check