Codex
OpenAI · Everything the hub tracks about Codex: MCP Clients, AI Plugins, IDE Integrations, AI Pricing, AI Security.
MCP Clients
OpenAI Codex
Yes: OAuth sign-in, Local (stdio), Remote (HTTP/SSE)
7 of 10 unknown
Full mcp detail →AI Plugins
Codex plugins
Yes: Public directory, MCP-based, Bundles skills, Private / custom, Git marketplaces, OAuth sign-in, Org admin controls, Agent Plugins standard
Partial: Hooks
1 of 10 unknown
Full plugins detail →IDE Integrations
OpenAI Codex
Yes: Agent mode, MCP, BYO model / key, Local models, VS Code, JetBrains, Xcode, Zed
4 of 12 unknown
Full ides detail →AI Pricing
OpenAI Codex
Free tier: Unknown
With ChatGPT Plus $20 (ChatGPT Plus), With ChatGPT Pro $100 / $200 / $500 (Pro tiers), With ChatGPT Business $25 Standard / $125 Premium per seat
All 3 plans →AI Security
Codex
Yes: Tool-call approval prompts, Per-tool allow / deny, Sandboxing, OAuth for remote MCP, Admin allowlists, Audit logs, Security disclosure page
3 of 10 unknown
Full security detail →Security advisories (3)
1 critical · 1 high · 1 not ratedPostman Desktop auto-installs Codex / Claude Code plugins and pre-trusts its own startup hook
Postman Desktop 12.33.4–12.35.1
OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files
Codex CLI · CVE-2025-61260 · GHSA-xrxf-jgv3-qmrm
Sandbox bypass due to bug in path configuration logic
Codex CLI · CVE-2025-59532 · GHSA-w5fx-fh39-j5rw
Recent updates
Postman Desktop 12.33.4–12.35.1: Postman Desktop auto-installs Codex / Claude Code plugins and pre-trusts its own startup hook
Not Rated. Status: open. Users report Postman's auto-existing-upgrade step installing Postman plugins into Claude Code and Codex, writing a trusted hook hash into Codex config, adding a SessionStart hook, the remote MCP server mcp.postman.com and a CLI in ~/.local/bin. Postman staff replied on Nov 3 that opt-in will be made clearer and hook approval is under review. No CVE.
GPT-5.5 retired from Codex
GPT-5.5 is no longer available in Codex with ChatGPT sign-in, per the Codex pricing page.
Other tools
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.