Start a read-only local Codex job and return its job ID immediately.

The project is a path relative to the configured Codex root. The server rejects paths outside that root and always runs Codex in read-only mode. Use get_codex_job to retrieve the final result.

Start a read-only Codex inspection job and return immediately.

Get the status and result of a local Codex job.

Cancel a local Codex job; force only releases unconfirmed state.

Create a durable Workflow for a multi-Step task.

Create an immutable executable Step inside one Workflow.

Start one explicit Step attempt or return its existing Job.

Get a durable Workflow with its Steps and Job attempts.

Create or replace one UTF-8 file after explicit user authorization.

Apply an authorized Begin Patch block transactionally.

Start an argv-based command job and return its ID immediately.

This is a high-privilege entry point. No shell is inserted, but the chosen executable can access paths outside the structured root. Use it only under the explicit policy returned by get_permissions. Use get_job for output and cancel_job to stop it.

Start authorized project tests as a background job.

Test code can create files and execute project-controlled code.

Get unified command, test, Codex, or Codex Turn job status.

Cancel a unified job; force only releases unconfirmed state.

Return branch, HEAD, modified, staged, and untracked files.

Return a bounded workspace or staged diff and its stat.

Commit authorized paths without hooks, signing, filters, or pushing.

List local Codex app-server threads, optionally filtered by project.

Read thread metadata and a bounded, paginated page of turns.

Load an existing local Codex thread with unattended full access.

This is a high-privilege entry point. Use it only after explicit user authorization under the permission policy returned by get_permissions.

Start a persistent app-server turn and return its IDs immediately.

Omit thread_id to create a new local Codex thread. Poll with get_codex_turn_status; the turn continues after this MCP call returns. This is a high-privilege entry point and may access paths outside the structured tool root.

Send additional instructions to an authorized active Codex turn.

Interrupt an active local Codex turn.

Get status, items, and final agent message for one Codex turn.

Return the effective root, hard boundaries, and tool-use policy.

Return bridge process health without accessing project files.

List readable files in a project under the configured structured root.

Set include_all to true to include dependencies, runtime state, Git internals, and caches. Credential files and credential directories are always excluded. Paths are relative to the selected project.

Read one UTF-8 text file from a selected project.

Both the project and file path are constrained to the configured root. Common credential files and credential directories are excluded; Git files, dependencies, and runtime configuration are readable.