Skip to content
Agentmart
Submit a tool

CodexGuild

What changed in your stack since the model's cutoff, error fixes, and security-scanned skills/MCPs

Connector by codexguild.comOfficial · Domain verified by the MCP Registry

IndexedLicense unknownLocal (stdio)Remote (HTTP)
Write a review

Install

Works with Claude Code, VS Code, Codex, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/codexguild-com-codexguild

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoint

  • https://api.codexguild.com/v1/mcp Remote (HTTP)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

What changed in your stack since the model's cutoff, error fixes, and security-scanned skills/MCPs

Use cases: security-scanning, code-review

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
7 read · 0 write · 0 deleteRead-only
Secrets
2 (API keys, tokens or passwords)
Install scripts
None found
Runs as
Node.js package

Tools by what they do 7

Read from the source code; the running server may list different tools.

Read 7 · Look things up without changing anything.

  • codexguild_coach
  • codexguild_lint_instructions
  • codexguild_readiness
  • codexguild_scan_code
  • codexguild_scan_security
  • codexguild_scan_skills
  • codexguild_scan_workflows

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • Authorization
  • CODEXGUILD_API_KEY

Network hosts it talks to 1

  • api.codexguild.com · found in remote endpoint, install command

Files it touches

  • Any path the agent passes to its tools

Tools (7)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • codexguild_coachread-only

    Review this project's recent agent sessions (Claude Code / OpenClaude transcripts on this machine) for where time was lost: the same error hit repeatedly, retry loops, refused tool calls (with allowlist suggestions), edits that missed, files re-read many times, compactions, sessions that ended with unchecked code, MCP servers that never get used — and what to change. Use it when the user asks how to make the agent work better here. Runs locally — transcripts are not uploaded.

  • codexguild_lint_instructions

    Lint the agent instruction files in this project (AGENTS.md, CLAUDE.md, GEMINI.md, .cursorrules…): size per session, missing build/test commands, README copy, generic advice, secrets, machine-specific paths, prompt-injection and other scanner findings. Runs locally — file contents are not uploaded.

  • codexguild_readinessread-only

    Score how well THIS repository is set up for a coding agent (0–100): instruction file quality and whether it names the build/test commands, test and type-check commands, lockfile, secrets kept out of git, CI, safe agent workflows, CodexGuild hooks — with the fixes worth doing, biggest first. Runs locally — nothing is uploaded.

  • codexguild_scan_coderead-only

    Find deprecated and removed APIs in this project's code for the exact versions it runs (from the lockfiles): e.g. `app.mount` deprecated in hono 4.13, with the replacement and where it is used (file:line). Only package names and versions are sent to CodexGuild; the code is searched locally and never uploaded. codexguild_sync runs this automatically.

  • codexguild_scan_securityread-only

    Pattern-scan this project's OWN code for common vulnerability classes (OWASP/CWE): hardcoded secrets, SQL injection via string concatenation, eval/shell injection, insecure deserialization, weak crypto, SSRF, path traversal, and IDOR-prone lookups — with file:line and a fix for each. Pattern matching, not proof: read a finding before changing code. Runs locally — nothing is uploaded. Run this before finishing a feature/PR that touches routes, queries, auth, serialization or file/network I/O; codexguild_sync also runs it once at session start.

  • codexguild_scan_skillsread-only

    Security-audit the skills installed on THIS machine (~/.claude/skills, Claude plugins, ~/.codex/skills, ~/.agents/skills, ~/.hermes/skills, project skills…). Detects pipe-to-shell, credential exfiltration, hidden unicode, prompt injection, agent-config tampering and safety bypasses. Runs locally — nothing is uploaded.

  • codexguild_scan_workflowsread-only

    Security-review the GitHub Actions workflows in this project that run coding agents (claude-code-action, run-gemini-cli, codex, opencode, aider…): triggers outside contributors control (pull_request_target, issue_comment, issues) combined with secrets, issue/PR text interpolated into prompts or shells (prompt injection), unrestricted agent tools, broad permissions, unpinned agent actions. Runs locally — nothing is uploaded.

Signals

Weekly downloads
2,349
Last release
Oct 26, 2026 (yesterday)
Last package publish
Oct 22, 2026 (5 days ago)

From the package registry.

Details

Registry name
com.codexguild/codexguild
Version
1.17.0
Auth
Bearer token, API key
Packages
npm @codexguild/mcp
License
License unknown
Website
codexguild.com/docs/mcp
First seen
Oct 24, 2026
Last checked
Oct 26, 2026
Source
Official MCP Registry
Cite this page

CodexGuild MCP server. Agent Mart. https://agentmart.dev/connectors/codexguild-com-codexguild (last updated 2026-10-26)