Codex Control Plane MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CODEX_HOME | No | Codex home directory. Defaults to %USERPROFILE%\\.codex. | |
| CODEX_BINARY_PATH | No | Optional explicit Codex binary path. | |
| DEEPSEEK_ENV_PATH | No | Optional .env file for DeepSeek summary settings. | |
| CODEX_MCP_STATE_DB | No | Local MCP state DB path. | |
| CODEX_ALLOWED_ROOTS | No | Semicolon-separated path allowlist. | |
| CODEX_PROJECTS_ROOT | No | Project root scanned by catalog and read tools. | |
| CODEX_MCP_DEFAULT_MODEL | No | Default Codex model passed to app-server. | |
| CODEX_PROJECTS_REGISTRY | No | Optional JSON project registry path. | |
| CODEX_MCP_DEFAULT_EFFORT | No | Default effort level. | |
| DEEPSEEK_SUMMARY_ENABLED | No | Enables or disables remote summary calls. | |
| CODEX_MCP_DEFAULT_SANDBOX | No | Default write sandbox. Defaults to danger-full-access. | |
| OPENCLAW_CODEX_MCP_CONFIG | No | Fallback path to JSON configuration file. | |
| CODEX_CONTROL_PLANE_MCP_LOG | No | Log file path. | |
| CODEX_CONTROL_PLANE_MCP_CONFIG | No | Path to JSON configuration file. Also accepts OPENCLAW_CODEX_MCP_CONFIG as fallback. | |
| CODEX_KB_HISTORY_PROJECTS_ROOT | No | Optional legacy normalized KB history root. | |
| CODEX_MCP_HOOK_HISTORY_ENABLED | No | Enables SQLite hook history. Defaults to true. | |
| CODEX_MCP_DEFAULT_APPROVAL_POLICY | No | Default write approval policy. Defaults to never. | |
| CODEX_MCP_HOOK_HISTORY_MAX_TEXT_CHARS | No | Per-message hook capture limit. | |
| CODEX_MCP_APPROVAL_RESPONSE_TIMEOUT_SECONDS | No | Pending interaction timeout. |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| codex_list_projectsB | List known Codex projects from the project registry, MCP hook history, transcript index, and read-only Codex state. |
| codex_list_project_chatsC | List Codex chats for a project with UI-like titles where available. |
| codex_list_active_chatsC | List chats that appear active from live/cache/transcript evidence. |
| codex_search_chatsA | Search Codex chats across projects by keywords, multiple terms, or exact phrases using the MCP-owned FTS index over hook history, transcripts, and legacy KB history. Returns ranked chat matches, not full transcripts, and never calls DeepSeek. |
| codex_get_chat_statusA | Get lightweight Codex chat status and short previews without DeepSeek and without full transcript content. |
| codex_get_chatB | Get Codex chat content from MCP hook history, Codex transcripts, or legacy KB history fallback. The history before the latest user/orchestrator message is summarized with DeepSeek, and only the latest user/orchestrator message plus following raw Codex/tool/event messages are returned. |
| codex_send_messageA | Compatibility layer low-level write tool: send a new user message into an existing Codex persisted chat via app-server thread/resume + turn/start. Returns after turn/start is accepted; poll codex_get_turn_status for messages and completion. For durable long-running tasks and client-timeout resilience, prefer codex_submit_task(operation_type='send_message'). |
| codex_start_chatA | Compatibility layer low-level write tool: start a new Codex chat in a known project via app-server thread/start + turn/start. Returns after turn/start is accepted; poll codex_get_turn_status for messages and completion. For durable long-running tasks and client-timeout resilience, prefer codex_submit_task(operation_type='start_chat'). |
| codex_start_plan_workflowB | Start a durable long-running orchestrator -> Codex workflow by launching a new Codex chat in real Plan Mode. Returns workflowId, threadId, and planTurnId for polling. |
| codex_start_review_workflowB | Start a durable Codex code review workflow through app-server review/start. Returns a fast workflow ack; poll codex_get_workflow_status for review progress and final report. |
| codex_get_workflow_statusB | Poll a durable long-running orchestrator -> Codex workflow. Aggregates plan turn, execution turn, latest plan, pending interactions, and recommended next action. |
| codex_adopt_workflow_planA | Adopt a newer valid Plan Mode candidate from the same Codex thread into an existing durable workflow. This is idempotent by workflow and plan hash and never starts execution by itself. |
| codex_approve_planB | Approve the latest completed Plan Mode plan for a durable workflow and queue the execution turn. Repeated calls are idempotent and do not create duplicate execution turns. |
| codex_preflight_project_runC | Run read-only preflight checks before a long Codex workflow. Optionally starts a tiny live probe when live_probe=true. |
| codex_get_turn_statusB | Get tracked Codex turn status and the latest assistant messages. Uses live app-server tracking with MCP hook history and legacy KB history fallback. |
| codex_execute_planA | Compatibility layer low-level workflow write tool: submit the latest approved Plan Mode plan for implementation by sending 'Implement the plan.' in default collaboration mode. For durable long-running tasks and client-timeout resilience, prefer codex_submit_task(operation_type='execute_plan'). |
| codex_submit_taskC | Durably queue a Codex write operation and return immediately with operationId. Use codex_get_operation_status to poll threadId, turnId, messages, pending interactions, and completion. |
| codex_get_operation_statusA | Poll a durable Codex operation created by codex_submit_task. Returns current operation phase, thread/turn ids, latest messages, pending interactions, and recommended next action. |
| codex_list_pending_interactionsC | List pending Codex app-server approval/input/elicitation requests waiting for the orchestrator. |
| codex_answer_pending_interactionC | Answer a pending Codex app-server approval/input/elicitation request so the active turn can continue. |
| codex_interrupt_turnA | Interrupt a running Codex turn through the MCP-owned Codex app-server subprocess. Accepts direct thread/turn ids or durable operation/workflow context. |
| codex_archive_threadC | Archive a known Codex thread through codex-app-server thread/archive. Refuses to run while the thread has active work. |
| codex_unarchive_threadA | Unarchive a known Codex thread through codex-app-server thread/unarchive. Refuses to run while the thread has active work. |
| codex_start_thread_compactionB | Start Codex context compaction for a known thread through codex-app-server thread/compact/start. Poll codex_get_thread_compaction_status with the returned actionId. |
| codex_get_thread_compaction_statusA | Poll a thread compaction action created by codex_start_thread_compaction. |
| codex_restart_app_serverA | Restart only the MCP-owned Codex app-server subprocess. This does not restart Codex Desktop and refuses to run while the MCP app-server has active turns, captures, or pending requests. |
| codex_get_app_server_statusA | Get status of the MCP-owned Codex app-server subprocess without starting it. |
| codex_get_runtime_capabilitiesA | Read a compact cached inventory of local codex-app-server runtime capabilities: models, permission profiles, sandbox readiness, hooks, skills, provider features, redacted account status, and supported schema methods. |
| codex_health_summaryA | Get a compact read-only MCP/Codex health summary for orchestrators without starting app-server or returning large logs. |
| codex_collect_diagnosticsB | Collect a read-only MCP/Codex diagnostic snapshot: paths, app-server state, active work, pending interactions, workflows, logs/events pointers, and health checks. |
| codex_get_diagnostic_logsB | Read redacted MCP diagnostic log lines and MCP-owned app-server event audit entries with thread/turn/workflow filters. |
| codex_analyze_issueB | Analyze MCP/Codex diagnostics and logs to classify likely root cause and recommend safe repair actions. |
| codex_repair_issueB | Run an allowlisted MCP/Codex repair action with before/after audit. Unsafe actions require force=true. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/aresyn/codex-control-plane-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server