codex-claude-bridge-mcp
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@codex-claude-bridge-mcpCreate a task to review the PR and list all open tasks"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Codex ↔ Claude Code Bridge MCP
English · Türkçe
One local MCP server that lets Codex and Claude Code coordinate through a shared task board and message inbox.
It uses the standard MCP stdio transport. No API key, web server, or cloud account is required. Both clients run the same server program and point at the same local data directory.
Scope: version 0.1.0 is for a single machine or a trusted shared filesystem. It is not a secure multi-user or internet-facing collaboration service.
What it provides
Create, list, claim, update, block, and complete shared tasks.
Send general messages or messages attached to a task.
Prevent active tasks from being claimed by both agents.
Atomically write the shared state, with a cross-process lock for concurrent client calls.
Related MCP server: session-coord-mcp
Quick start
Windows (PowerShell)
git clone https://github.com/nevzoom/codex-claude-bridge-mcp.git
cd codex-claude-bridge-mcp
npm install
npm run build
.\scripts\install.ps1This registers the server with both locally installed CLIs and stores shared state in ~/.codex-claude-bridge. Restart Codex and Claude Code afterwards.
To register only one client:
.\scripts\install.ps1 -Codex
.\scripts\install.ps1 -ClaudemacOS / Linux
git clone https://github.com/nevzoom/codex-claude-bridge-mcp.git
cd codex-claude-bridge-mcp
npm install
npm run build
bash scripts/install.shUse bash scripts/install.sh --codex or --claude to register only that client. To use another shared directory, pass --data-dir /path/to/bridge-data (or -DataDirectory in PowerShell).
Manual MCP configuration
The installer runs the official CLIs for you. If you prefer to configure manually, register this stdio command with both clients, using the same data directory:
node /absolute/path/to/codex-claude-bridge-mcp/dist/index.jsSet this environment variable for both registrations:
CODEX_CLAUDE_BRIDGE_DATA_DIR=/absolute/path/to/shared-bridge-dataCodex also supports project/global MCP configuration in config.toml; Claude Code supports project/user MCP registration. The supplied installers use user-level registration so the bridge is available across projects.
When this variable is omitted, the server uses ~/.codex-claude-bridge. This is convenient when both clients run under the same operating-system user. Set it explicitly whenever clients run under different users or machines.
MCP tools
Tool | Purpose |
| Add a shared task. |
| View tasks, optionally by status. |
| Mark a task as owned by Codex, Claude, or a human. |
| Change its status, owner, or result. |
| Send a general or task-linked message. |
| Read messages for an agent or task. |
Suggested agent workflow
Create a discrete task with
create_task.The receiving agent calls
list_tasks, thenclaim_taskbefore working.Share important context with
post_message.Finish with
update_taskusingstatus: "done"and a conciseresult; useblockedif human input is needed.
Development
npm install
npm run check
npm run buildPublish on GitHub and npm
Create an empty GitHub repository named
codex-claude-bridge-mcp, commit this project, and push themainbranch.Create an npm account, then run
npm loginandnpm publish. If the package name is taken, rename thenamefield to an npm scope you own, such as@your-name/codex-claude-bridge-mcp.Create a GitHub release and tag it with the same semantic version as
package.json.
The package only publishes the compiled dist directory plus the README and MIT license. CI type-checks and builds every pull request.
After publishing to npm, users can register the package directly with their MCP clients using an npx -y <package-name> stdio command. The GitHub-clone installer remains the easiest supported setup because it registers both clients and a shared data directory in one step.
Security and privacy
Task text and messages are stored unencrypted in state.json under the chosen data directory. Do not point it to an untrusted network share and do not put secrets into messages. The data directory is intentionally excluded from Git.
License
Available Tools
6 toolsclaim_taskA
Claim an open task before starting work; prevents duplicate ownership.
| Name | Required | Description | Default |
|---|---|---|---|
| owner | Yes | ||
| task_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses a key behavioral trait—'prevents duplicate ownership'—which implies a conflict mechanism and side effect. However, it does not detail what happens on failure or other transactional details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence of 10 words that front-loads the action and purpose. Every word earns its place with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple claim operation with two parameters and no output schema, the description covers purpose, usage, and a key behavioral guarantee. It lacks explicit parameter explanations, but the enum on owner and the task description partially compensate. Overall, it is sufficiently complete for basic selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 0%, and the description does not explain the 'task_id' or 'owner' parameters at all. The agent must infer their meaning from the parameter names and the owner enum, so the description adds no semantic value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function with a specific verb and resource: 'Claim an open task before starting work; prevents duplicate ownership.' This also distinguishes it from sibling tools like create_task or update_task by emphasizing the ownership/claiming aspect.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context for when to use the tool: 'before starting work' on a task. It does not explicitly name alternatives or exclusions, but the workflow context is clear enough for selecting this tool over others.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_taskB
Create a shared task that either Codex or Claude Code can claim.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | ||
| created_by | Yes | ||
| description | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description must carry the full burden. It discloses that the task is shared and claimable, but does not mention side effects, permissions, reversibility, or what 'shared' means operationally. For a create operation, this leaves uncertainty about what happens after creation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, direct, and fluff-free sentence that immediately states the core purpose. No wasted words and the key information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With 3 parameters, no annotations, and no output schema, the description is far too sparse. It does not explain parameter semantics, return values, or operational details needed for correct invocation, making it incomplete for an agent to use reliably.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 0% description coverage, and the tool description does not mention any of the three parameters (title, created_by, description) or their meanings. The description fails to compensate for the lack of schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb (create) and resource (shared task) and highlights the unique characteristic that either Codex or Claude Code can claim it. This clearly distinguishes it from sibling tools like list_tasks, claim_task, and update_task.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies a usage context: tasks created are intended to be claimable by both agents. However, it does not explicitly state when to use this tool versus alternatives or provide exclusions, so guidance is only implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_tasksB
List tasks in the shared coordination board.
| Name | Required | Description | Default |
|---|---|---|---|
| status | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure, but it only states that it lists tasks. It does not mention that this is a read operation, what data is returned, whether the optional status filter limits results, or any ordering/pagination behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence with no filler. It clearly states the tool's purpose in a compact way, and every word contributes meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple but important context is missing. There is no output schema, so the description should explain what the returned task list contains. It also does not explain the optional status parameter, and the sibling read_messages tool suggests a need to differentiate this read operation from others.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for parameter meaning, but it does not mention the optional 'status' filter or how it affects results. The enum values in the schema are self-descriptive, but the description adds no value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'List tasks in the shared coordination board' uses a specific verb ('list'), a clear resource ('tasks'), and a scope ('shared coordination board'), which clearly distinguishes it from sibling tools like create_task, update_task, and post_message.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no explicit guidance on when to use this tool versus alternatives. It implies read-only task listing but does not mention conditions, exclusions, or how it differs from read_messages or other task-related tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
post_messageB
Send a message to the other agent, optionally attached to a task.
| Name | Required | Description | Default |
|---|---|---|---|
| to | No | ||
| from | Yes | ||
| text | Yes | ||
| task_id | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full responsibility for behavioral disclosure. It states the action and the optional task association, but omits important details such as how 'from' and 'to' work, whether messages are persisted, delivery guarantees, or any side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a concise, single sentence that effectively front-loads the core action and the one optional modifier. Every word contributes, and no unnecessary detail is present.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with four parameters, no output schema, and no annotations, the description is too sparse. It does not clarify the relationship between sender and recipients, how the task attachment is used, or how this tool fits with read_messages and task-management siblings. An agent would likely need external knowledge to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has no descriptions (0% coverage), so the description must compensate. It mentions 'attached to a task' which clarifies task_id, but does not explain the semantics of 'from' and 'to', nor does it add meaning to 'text' beyond the schema's minLength.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: sending a message to another agent, with an optional task attachment. This distinguishes it from sibling tools like read_messages (reading) and task-management tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the usage: use this to send messages to another agent, optionally tied to a task. However, it does not explicitly mention when to prefer this over alternatives like read_messages, nor does it state exclusions or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_messagesA
Read shared messages, optionally filtering for a task or recipient.
| Name | Required | Description | Default |
|---|---|---|---|
| task_id | No | ||
| recipient | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries the burden of behavioral disclosure. It explicitly uses 'Read,' which implies a non-destructive operation, and 'optionally filtering' conveys that unfiltered calls may return all messages. However, it does not mention permissions, response format, pagination, or any side effects, leaving room for improvement. The read nature is self-evident but lacks rich context beyond that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, front-loaded with the core action 'Read shared messages,' and every word is informative. There is no redundant or filler content, achieving maximum conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a low-complexity read tool with two optional parameters and no output schema, the description sufficiently covers the main purpose and filter behavior. It implies that unfiltered calls return all messages, and the read-only nature is clear. It lacks explicit notes on return structure or edge cases, but for this simplicity, it is nearly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must compensate. It explicitly states that filtering by task or recipient is optional, directly mapping to the task_id and recipient parameters. This adds meaningful semantics about their purpose and optionality, which the bare schema does not convey. It does not explain enum values or formats, but the schema covers those details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Read shared messages, optionally filtering for a task or recipient' clearly states the action (read), resource (shared messages), and optional filtering capability. It distinguishes itself from sibling tools like post_message (write) and task-management tools by focusing on reading messages.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly indicates the tool is for reading shared messages, implying use when retrieval is needed, and the optional filtering context is presented. It does not explicitly mention alternatives or exclusions, but the read intent is unambiguous given the sibling tools, so it earns a 4 rather than a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_taskB
Update a task's status, owner, or final result.
| Name | Required | Description | Default |
|---|---|---|---|
| owner | No | ||
| result | No | ||
| status | No | ||
| task_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits itself. It only says 'Update' (indicating mutation) but does not mention any side effects, permission requirements, whether partial updates are allowed, or what the response contains. This leaves significant behavioral ambiguity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence, front-loaded with the core action and fields. Every word earns its place with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 4 parameters, no output schema, and no annotations, the one-sentence description is under-specified. It lacks information about parameter semantics, constraints, return values, and relationships to sibling tools, making it minimally viable but incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must compensate. It names status, owner, and final result but provides no details on allowed values (e.g., status enum) or what 'result' should contain. The description adds only superficial mapping to parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb (Update) and resource (task), and explicitly lists the updatable fields (status, owner, final result). This clearly differentiates it from sibling tools like create_task, list_tasks, and claim_task, which have different actions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies its use for modifying existing tasks by listing the fields, but does not explicitly state when to prefer this over claim_task (which likely also changes owner) or provide exclusions. Usage context is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
6 tool updates
v0.1.0- First observed
claim_task - First observed
create_task - First observed
list_tasks - First observed
post_message - First observed
read_messages - First observed
update_task
TDQS
Scored across 6 tools
Each tool targets a distinct action: creating, listing, claiming, updating tasks, and posting/reading messages. There is no overlap or ambiguity between any two tools.
All tool names follow a consistent verb_noun pattern (create_, list_, claim_, update_, post_, read_). The naming is predictable and uniform.
Six tools is a well-scoped size for a coordination bridge. Each tool earns its place and covers a necessary function without bloat.
The tool set covers the full task lifecycle (create, list, claim, update) and messaging (post, read). A minor gap is the absence of a dedicated get_task or delete/archive mechanism, but update_task can handle status changes.
Maintenance
Related MCP Connectors
Hosted MCP server connecting claude.ai, ChatGPT and other AI apps to your own computer
Official MCP server for Agentwork — delegate tasks to AI agents with human-in-the-loop
Nifty's MCP server — exposes tasks, projects, messages, and files as tools for AI agents.
Real-time chat for AI agents. Claude Code, Cursor, Cline and Codex join channels over MCP.
Related MCP Servers
- AlicenseAqualityCmaintenanceA local MCP server that lets Claude delegate scoped work to Codex with structured results and guardrails, supporting planning, code review, build, reverse engineering, and long-running background tasks.11MIT
- AlicenseNot gradedqualityDmaintenanceA local-first MCP server for coordinating parallel AI coding sessions with tools like Claude Code and Codex in a single repository.2MIT
- AlicenseNot gradedqualityDmaintenanceA local MCP server that connects AI coding agents (Claude Code, Codex, Cursor, etc.) on the same machine via a shared message bus, enabling them to chat, delegate tasks, and collaborate privately without cloud or internet.60 npm17MIT
- AlicenseAqualityBmaintenanceA local MCP server that enables multiple AI coding tools to share structured project state (decisions, tasks, bugs) so they coordinate without re-explaining.5MIT