v3.10.1

sinewaveai/agent-security-scanner-mcpv3.10.1Feb 19, 2026by sinewaveai

AI Summary

Added OpenAI Codex support to the init command, bringing the total supported MCP clients to 10 with automatic configuration and manual TOML fallback.

Key Highlights

  • Codex support via npx init codex command
  • 10 supported MCP clients total
  • Manual TOML fallback configuration for Codex

New Features

  • Codex support: npx -y agent-security-scanner-mcp@3.10.1 init codex
  • Delegates to codex mcp add under the hood
  • Supports --dry-run, --name flags and existing init options
  • Prints manual TOML instructions if CLI step fails

Full Release Notes

## What's new

### Codex support in `init`

You can now configure the Agentic Security MCP server for [OpenAI Codex](https://github.com/openai/codex) with one command:

\`\`\`bash
npx -y agent-security-scanner-mcp@3.10.1 init codex
\`\`\`

This delegates to `codex mcp add` under the hood, since Codex manages its MCP config via TOML through its own CLI rather than a JSON file.

**Manual fallback** — if the CLI step fails, add this to `~/.codex/config.toml`:

\`\`\`toml
[mcp_servers.agentic-security]
command = "npx"
args = ["-y", "agent-security-scanner-mcp"]
\`\`\`

Then verify with `/mcp` inside a Codex session.

### What the init command does

- Checks that the `codex` CLI is in your PATH (clear error + install link if not)
- Runs `codex mcp add agentic-security -- npx -y agent-security-scanner-mcp`
- Supports `--dry-run`, `--name <key>`, and all existing init flags
- Prints manual TOML instructions if `codex mcp add` fails

## Supported clients (now 10)

`claude-desktop`, `claude-code`, `cursor`, `windsurf`, `cline`, `kilo-code`, `opencode`, `cody`, `openclaw`, **`codex`** ✨

## Full changelog

- `src/cli/init.js` — added `codex` to `CLIENT_CONFIGS`, `installCodexMCP()` handler, `isCLIBased` dispatch
- `tests/init-codex.test.js` — 13 new TDD-verified tests covering all codex init code paths