Codex Native Bridge
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CODEX_NATIVE_CODEX_BIN | No | Path to the Codex binary. | codex |
| CODEX_NATIVE_STATE_DIR | No | Where job records, logs, and generated images are stored. | ~/.codex-native-bridge |
| CODEX_NATIVE_ALLOWED_ROOTS | Yes | Required. Absolute directories Codex may read and write, separated by : (; on Windows). Nothing outside these paths is reachable. | |
| CODEX_NATIVE_ALLOW_FULL_ACCESS | No | Set to 1 to permit the danger-full-access sandbox. Leave unset unless you have read Security. |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| codex_native_healthC | Check the Codex Native Bridge, current Codex model catalog, image generation capability, and reasoning profiles. |
| codex_native_modelsA | List live Codex models and supported reasoning efforts. Use before an explicit model/effort override. |
| codex_native_jobsA | List recent durable Codex Native jobs. Use after Claude restarts or when a job id was lost. |
| codex_native_pruneA | Delete finished job records, logs, and generated images beyond the retention window. Running jobs are never removed. Use dryRun first to see what would go. |
| codex_native_startA | Start a durable Codex task in the background. Returns a job id immediately. Poll with codex_native_status, then read codex_native_result. danger-full-access requires explicit user confirmation before passing dangerousConfirmed: true. |
| codex_native_imageA | Generate a real bitmap image through Codex's native image generation tool. Use for illustrations, assets, covers, photorealistic scenes, textures, and mockups. Do not use for flowcharts, architecture diagrams, data visualizations, charts, or UI prototypes; callers should create those with code or SVG. For bitmap requests, code-drawn substitutes are rejected. danger-full-access requires explicit user confirmation before passing dangerousConfirmed: true. |
| codex_native_statusB | Read current status of a background Codex Native job. Wait at least 30 seconds between polls; do other work before checking again. |
| codex_native_resultA | Read the complete result of a Codex Native job, including final message, changed files, commands, verification, image paths, and errors. |
| codex_native_replyA | Resume a previous Codex Native thread with a follow-up task. Use the prior job id or thread id; returns a new durable job id. |
| codex_native_cancelB | Cancel a running Codex Native job and its app-server process tree. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/PatrickStar-sketch/codex-native-bridge'
If you have feedback or need assistance with the MCP directory API, please join our Discord server