Codex

Outcome

Register the Andy Streamable HTTP MCP server in Codex and prove the session with andy_identity_status.

Minimum version

Codex CLI ≥ 0.147 (verified on codex-cli 0.147.0). Older builds need [features].rmcp_client = true (or experimental_use_rmcp_client = true) for streamable HTTP; that flag is gone in 0.147.

Install

CLI (recommended — stores bearer token via env var name only):

export ANDY_API_KEY='YOUR_ANDY_API_KEY'
codex mcp add andy \
  --url https://app.andypartner.com/api/mcp \
  --bearer-token-env-var ANDY_API_KEY

Equivalent ~/.codex/config.toml block:

[mcp_servers.andy]
url = "https://app.andypartner.com/api/mcp"
bearer_token_env_var = "ANDY_API_KEY"

Remove:

codex mcp remove andy

Headless probe (read-only tool call; requires ANDY_API_KEY in the environment). Do not use --dangerously-bypass-approvals-and-sandbox — that flag skips all confirmations and sandboxing and is not needed for a single MCP tool call. Use plain codex exec (sandbox policy comes from your Codex config). Note: codex exec -s read-only can cancel remote MCP tool calls on codex-cli 0.147 ("user cancelled MCP tool call"); keep the default sandbox for this probe.

export ANDY_API_KEY='YOUR_ANDY_API_KEY'
printf '%s\n' 'Call MCP tool andy_identity_status (server andy) with empty args. Report data.status and meta.requestId.' \
  | codex exec --skip-git-repo-check -

Next step

Confirm tools list includes andy_*, then open Auth and scopes or the Tool catalog.