{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.parisbs/codex-subagent-mcp","description":"Delegate coding tasks to the OpenAI Codex CLI, installed separately, with explicit model and effort.","title":"Codex Subagent","repository":{"url":"https://github.com/parisbs/codex-subagent-mcp","source":"github"},"version":"0.6.0","websiteUrl":"https://github.com/parisbs/codex-subagent-mcp#readme","packages":[{"registryType":"npm","identifier":"codex-subagent-mcp","version":"0.6.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"Delegation and follow-up processes per rolling hour: decimal integer 1 to 9007199254740991; unset means unrestricted. In memory per server; probes never count.","format":"string","name":"CODEX_SUBAGENT_MAX_DELEGATIONS_PER_HOUR"},{"description":"Cap on running background jobs: decimal integer 1 to 8 (default 8). Blocking calls do not use this cap.","format":"string","name":"CODEX_SUBAGENT_MAX_BACKGROUND_JOBS"},{"description":"Opt-in local usage log: on or off (default off). Records counts and settings, never prompts, code or paths; labels are caller text.","format":"string","name":"CODEX_SUBAGENT_USAGE_LOG"},{"description":"Model used when a call names none. Unset: the only entry of a single-entry CODEX_SUBAGENT_ALLOWED_MODELS, otherwise a call without a model is refused with a suggestion.","format":"string","name":"CODEX_SUBAGENT_DEFAULT_MODEL"},{"description":"Reasoning effort used when a call specifies none: none, minimal, low, medium, high, xhigh, max or ultra. Unset: the model's own default. Cannot exceed CODEX_SUBAGENT_MAX_EFFORT.","format":"string","name":"CODEX_SUBAGENT_DEFAULT_EFFORT"},{"description":"Comma-separated allow-list of model slugs; anything else is refused. Unset: unrestricted. A single entry acts as the default model; an empty entry is a configuration error.","format":"string","name":"CODEX_SUBAGENT_ALLOWED_MODELS"},{"description":"Sandbox used when a call specifies none: read-only, workspace-write or danger-full-access. Defaults to read-only and cannot exceed the ceiling.","format":"string","name":"CODEX_SUBAGENT_DEFAULT_SANDBOX"},{"description":"Ceiling on what a delegation may do: read-only, workspace-write or danger-full-access. Defaults to workspace-write; danger-full-access must be set explicitly.","format":"string","name":"CODEX_SUBAGENT_MAX_SANDBOX"},{"description":"Ceiling on reasoning effort: none, minimal, low, medium, high, xhigh, max or ultra. Unset: unrestricted. Higher efforts are lowered to a supported level, or refused if none fits.","format":"string","name":"CODEX_SUBAGENT_MAX_EFFORT"},{"description":"MCP servers from Codex's config a delegation keeps: none (default), all, or comma-separated names.","format":"string","name":"CODEX_SUBAGENT_MCP_SERVERS"},{"description":"Installed Codex plugins a delegation keeps: none (default), all, or comma-separated name@marketplace ids.","format":"string","name":"CODEX_SUBAGENT_PLUGINS"},{"description":"Whether a delegation keeps Codex's apps (connectors to external services): off (default) or on.","format":"string","name":"CODEX_SUBAGENT_APPS"},{"description":"Codex executable name or path. Unset: codex, searched on PATH. On Windows it must run directly, such as codex.exe; a .cmd or .bat shim is refused.","format":"string","name":"CODEX_BIN"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-10-21T00:45:56.520211Z","publishedAt":"2026-10-21T00:45:56.520211Z","updatedAt":"2026-10-21T00:45:56.520211Z","isLatest":true}}}