Enables peer discovery and direct messaging between multiple Codex sessions running on a single machine. It allows AI sessions to coordinate, find other active peers by repository or context, and exchange messages via a local broker.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
process.env. You'll be asked to provide them before it can run.CODEX_PEERS_DB— SQLite backing store (${:-~/.codex-peers.db})CODEX_PEERS_NAMESPACE— Isolation tip: on shared hosts, set a unique (and optionally CODEX_PEERS_TOKEN) to prevent cross-user message mixing.CODEX_PEERS_PORT— Local broker daemon on localhost:${:-7899}CODEX_PEERS_STALE_MSCODEX_PEERS_TOKEN— Isolation tip: on shared hosts, set a unique CODEX_PEERS_NAMESPACE (and optionally ) to prevent cross-user message mixing.CODEX_PEER_ID— (optional override for generated peer id)[](https://m8ven.ai/mcp/jscianna-codex-peers-mcp-ql4ywl)