Atlas / MCP servers / suvadadepolo-blip / codex-reset-mcp

codex-reset-mcpSAFE

mcp/suvadadepolo-blip/codex-reset-mcp

Hosted read-only MCP server for OpenAI Codex usage-limit resets: 24/48h forecast, verified reset record, service status. No API key.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
—
Transport
streamable-http
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://smithery.ai/servers/suvadadepolo/codex-reset)

Read-only facts about OpenAI Codex usage-limit resets, served by codex-reset.com over the Model Context Protocol.

This repository holds the client configuration and directory metadata for the hosted server. There is nothing to install or run: the server lives at the endpoint above, and its source is not published here.

Tools

All three tools are read-only (readOnlyHint: true) and read the same data as the site's public JSON API, so an agent and a browser never disagree.

locale is en, zh, ja or es and changes only the human-readable copy.

Example prompts

  • "Is Codex likely to re
Read from source at commit dbab9fc20b5bOBSERVED · 2026-10-11
02

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (3)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
streamable-http
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWInventory / provenance · inv.hidden_file · CWE-1104
.codexignore
.codexignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha dbab9fc20b5bfull audit observations/trust-audit/mcp-server/suvadadepolo-blip__codex-reset-mcp.json · Report an issue / request a re-scan
03

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-11dbab9fc20b5bSAFEB89first audit
04

Questions

What is the codex-reset-mcp MCP server?

Hosted read-only MCP server for OpenAI Codex usage-limit resets: 24/48h forecast, verified reset record, service status. No API key.

Is codex-reset-mcp safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does codex-reset-mcp need?

No credential environment variables were found in its source, so it appears to need none.

How does codex-reset-mcp run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (dbab9fc20b5b), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement