Codex + AXguard - AwareXone Docs

Plugin

./install.sh --agent codex
# project: ./install.sh --agent codex --project

Installs into $CODEX_HOME or ~/.codex (or .codex with --project).

MCP

pip install -e '.[mcp]'
codex mcp add axguard -- axguard mcp
codex mcp list

User config: ~/.codex/config.toml · Project: .codex/config.toml (trusted projects)

[mcp_servers.axguard]
command = "axguard"
args = ["mcp"]
startup_timeout_sec = 20
tool_timeout_sec = 120

[mcp_servers.axguard.env]
AXGUARD_ROOT = "/absolute/path/to/your/repo"

Optional per-tool approval modes are defined by Codex (auto · prompt · approve, …). In the TUI: /mcp.

Skill

With the plugin installed, prefer axguard-security so Codex calls axguard_security_review instead of inventing a scanner. Keep predictive risks separate from verified findings.