Who it is forA developer using Codex on a project with MCP servers who wants the normal tool catalog but with allow/deny checks and call validation in front of it.
The problemConnecting Codex straight to upstream MCP servers gives no single place to enforce allow/deny rules or check arguments before the upstream is contacted.
The outcomeCodex lists only authorized original tool names with full schemas, and calls are validated before any upstream server is invoked.
What you need first
- A reviewed checkout of the lennney/mcp-slim-guard repository (0.1.1-alpha.2 is not yet published to npm)
- npm to run ci, build, and link the package
- A project directory that already has an MCP configuration
- An upstream MCP server definition you are authorized to use
Steps
- In the reviewed checkout, run
npm ci, thennpm run build, thennpm link. - Change into your project directory and run
mcp-slim-guard init, thenmcp-slim-guard validate. - Edit
mcp-slim-guard.ymlso thetoolsallow and deny patterns match what Codex should reach. - Run
mcp-slim-guard plan --host codexto review the host plan without changing host files. - Run
mcp-slim-guard verify --host codex, thenmcp-slim-guard install --host codex --mode native.
Prompt for your agent
Use the lennney/mcp-slim-guard repo to set up Native mode for Codex in the project at <project-path>. Run the plan and verify commands from the README and report the planned host entry. Confirm that `mcp-slim-guard verify --host codex` reports a configured runtime before you apply the install.
Caveat. The package is an alpha source candidate that is not on npm yet, and the README advises reviewing authorization patterns before using it with privileged tools.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for lennney/mcp-slim-guard and "Give Codex a guarded, authorized MCP catalog"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer