Agent Security Scanner Mcp

What's new

Codex support in init

You can now configure the Agentic Security MCP server for OpenAI Codex with one command:

```bash
npx -y [email protected] init codex
```

This delegates to codex mcp add under the hood, since Codex manages its MCP config via TOML through its own CLI rather than a JSON file.

Manual fallback — if the CLI step fails, add this to ~/.codex/config.toml:

```toml
[mcp_servers.agentic-security]
command = "npx"
args = ["-y", "agent-security-scanner-mcp"]
```

Then verify with /mcp inside a Codex session.

What the init command does

• Checks that the codex CLI is in your PATH (clear error + install link if not)
• Runs codex mcp add agentic-security -- npx -y agent-security-scanner-mcp
• Supports --dry-run, --name <key>, and all existing init flags
• Prints manual TOML instructions if codex mcp add fails

Supported clients (now 10)

claude-desktop, claude-code, cursor, windsurf, cline, kilo-code, opencode, cody, openclaw, codex ✨

Full changelog

• src/cli/init.js — added codex to CLIENT_CONFIGS, installCodexMCP() handler, isCLIBased dispatch
• tests/init-codex.test.js — 13 new TDD-verified tests covering all codex init code paths