{
  "mcpServers": {
    "codex-security": {
      "command": "./scripts/launch_codex_security_mcp",
      "args": ["--stdio"],
      "cwd": ".",
      "env_vars": [
        "CODEX_HOME",
        "CODEX_SQLITE_HOME",
        "CODEX_API_KEY",
        "CODEX_SAFETY_IDENTIFIER",
        "CODEX_BROWSER_USE_NODE_PATH",
        "CODEX_CLI_PATH",
        "CODEX_ELECTRON_RESOURCES_PATH",
        "CODEX_MANAGED_PACKAGE_ROOT",
        "CODEX_MCP_NODE_PATH",
        "OPENAI_API_KEY",
        "OPENROUTER_API_KEY",
        "FIREWORKS_API_KEY",
        "AWS_BEARER_TOKEN_BEDROCK",
        "AWS_ACCESS_KEY_ID",
        "AWS_SECRET_ACCESS_KEY",
        "AWS_SESSION_TOKEN",
        "AWS_PROFILE",
        "AWS_REGION",
        "AWS_DEFAULT_REGION",
        "AWS_CONFIG_FILE",
        "AWS_SHARED_CREDENTIALS_FILE",
        "AWS_ROLE_ARN",
        "AWS_ROLE_SESSION_NAME",
        "AWS_WEB_IDENTITY_TOKEN_FILE",
        "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",
        "AWS_CONTAINER_CREDENTIALS_FULL_URI",
        "AWS_CONTAINER_AUTHORIZATION_TOKEN",
        "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",
        "PYTHON",
        "PYTHONUTF8",
        "CODEX_SECURITY_KNOWLEDGE_BASE",
        "CODEX_SECURITY_CONFIG_PATH",
        "CODEX_SECURITY_DEEP_SCAN_CONFIG_PATH",
        "CODEX_SECURITY_SCAN_ROOT",
        "CODEX_SECURITY_STATE_DIR",
        "CODEX_SECURITY_SURFACE",
        "HTTP_PROXY",
        "HTTPS_PROXY",
        "ALL_PROXY",
        "NO_PROXY",
        "SSL_CERT_FILE",
        "REQUESTS_CA_BUNDLE",
        "NODE_EXTRA_CA_CERTS",
        "XDG_CACHE_HOME"
      ],
      "startup_timeout_sec": 120,
      "tool_timeout_sec": 349200
    }
  }
}