Official
Read and write local files with configurable access controls.
filesystem, files, read, write
MCP Servers for Codex CLI
Codex CLI is OpenAI's terminal coding agent. It supports MCP through an `mcp_servers` section in its TOML config, letting you extend Codex with the same servers that power Claude Code, Cursor, and the rest of the ecosystem.
Set up MCP in Codex CLI
Four steps to connect your first MCP server.
- 1
Add a server with `codex mcp add`
Fastest path: `codex mcp add <name> -- <command>` writes the `[mcp_servers.<name>]` entry for you. Example: `codex mcp add context7 -- npx -y @upstash/context7-mcp`. Pass env vars with `--env KEY=VALUE` before the `--` separator.
- 2
Or edit config.toml under [mcp_servers.*]
Each MCP gets its own subtable: `[mcp_servers.<name>]`. Inside, set `command` and `args` — the same shape used by every MCP install snippet on top-mcps.com, just in TOML. For a remote server set `url` instead of `command`.
- 3
Use env for secrets
Reference shell variables with `${VAR_NAME}` inside the `env = { ... }` table. Tokens stay in your shell environment, not in the committed config. For HTTP servers, use `bearer_token_env_var` or `http_headers` instead.
- 4
Restart Codex and verify
Exit and relaunch the Codex CLI so it re-reads the config. Run `/mcp` inside the Codex TUI to list active servers and confirm their tool counts are non-zero.
Config file locations
- User config
~/.codex/config.tomlRead on startup, applies to every repo. Edit it directly or add servers with `codex mcp add`. - Project config
.codex/config.tomlPer-repo MCP set in the project root. Read for trusted projects only.
Example configjsonc
# ~/.codex/config.toml
[mcp_servers.filesystem]
command = "npx"
args = [
"-y",
"@modelcontextprotocol/server-filesystem",
"/Users/you/code",
]
[mcp_servers.context7]
command = "npx"
args = ["-y", "@upstash/context7-mcp"]
[mcp_servers.github]
command = "npx"
args = ["-y", "@github/github-mcp-server"]
env = { GITHUB_PERSONAL_ACCESS_TOKEN = "${GITHUB_TOKEN}" }Top MCPs for Codex CLI
The curated starting stack — install these first.
Official
Full GitHub API access: repos, PRs, issues, and code search.
git, github, repos, prs
Up-to-date library docs pulled directly into your AI context.
coding, documentation, libraries, accuracy
Archived
Anthropic's reference Postgres MCP — archived July 2025 and superseded by Postgres MCP Pro or the Supabase MCP.
database, sql, postgres, archived
Full browser automation: navigate, click, screenshot, and scrape.
browser, automation, scraping, puppeteer
Persistent knowledge graph memory across AI conversations.
memory, persistence, knowledge-graph, agents
All MCPs compatible with Codex CLI
135 servers verified to work with Codex CLI, ranked by popularity.
Official
Read and write local files with configurable access controls.
filesystem, files, read, write
Current time and IANA timezone conversion — the first-party MCP that tells an agent what time it actually is.
time, timezone, clock, iana
Official
Persistent memory layer for AI agents — auto-summarised, cross-session recall.
memory, mem0, recall, personalization
Retrieve web pages and convert them to clean markdown.
web, fetch, markdown, scraping
Official
Local Git operations: commit, diff, log, branch, and more.
git, local, commits, diff
Structured step-by-step reasoning for complex problem solving.
reasoning, thinking, agents, planning
Persistent knowledge graph memory across AI conversations.
memory, persistence, knowledge-graph, agents
Official
Full GitHub API access: repos, PRs, issues, and code search.
git, github, repos, prs
Official
Official Microsoft browser automation across Chromium, Firefox, and WebKit.
browser, automation, playwright, testing
Official
Run pre-built browser-automation Actors on managed infrastructure.
browser, automation, scraping, apify
Official
Google-published MCP server for databases — one Go binary speaks Postgres, MySQL, BigQuery, Spanner, AlloyDB, Snowflake, ClickHouse, MongoDB, Redis, and more.
database, multi-database, google, postgres
Official
Query dashboards, Prometheus/Loki datasources, alerts, and incidents from an AI agent — official.
grafana, observability, prometheus, loki
Official
AI-optimized web search with cleaned, citation-ready results.
search, web, research, rag
Official
Scrape, crawl, extract structured data, and search the web from an AI agent.
firecrawl, scraping, crawl, extract
Official
Search, scrape, and unblock any public web page from an AI agent — official Web Unlocker MCP.
bright-data, scraping, web-unlocker, proxy
Official
Neural web search and page fetch for AI agents — official remote MCP at mcp.exa.ai/mcp.
exa, search, neural, retrieval
Official
Look up Terraform Registry providers and modules, and manage HCP Terraform workspaces from an AI agent.
terraform, iac, infrastructure-as-code, hashicorp
Query and inspect MongoDB collections from Claude, Cursor, and VS Code.
database, nosql, mongodb, atlas
Official
Manage Azure resources across 40+ services from an AI agent — Microsoft's official MCP.
azure, microsoft, cloud, aks
Build and validate n8n workflows with an agent that knows all 2,000+ n8n nodes — most-installed n8n MCP.
n8n, automation, workflows, nodes
Up-to-date library docs pulled directly into your AI context.
coding, documentation, libraries, accuracy
Official
Search, ask, research, and reason via the official Perplexity MCP.
perplexity, search, research, sonar
Inspect keys, run commands, and debug Redis from an AI agent.
database, cache, redis, valkey
Vision-first browser automation built for AI agents.
browser, automation, browser-use, vision
Official
Drive Azure DevOps repos, pull requests, work items, and pipelines from an AI agent — Microsoft official.
azure-devops, ado, pull-requests, work-items
Official
Manage payments, customers, and subscriptions through Stripe.
stripe, payments, billing, invoicing
Official
Read, write, and search across Notion pages, databases, and blocks.
notion, docs, databases, knowledge
Official
Read channel messages, post replies, and trigger meetings from MS Teams.
communication, microsoft, teams, m365
Official
Manage Workers, R2 buckets, DNS, and edge policies on Cloudflare.
cloudflare, edge, workers, dns
Drive a live Blender session from an agent — create objects, set materials, run Python, render.
blender, 3d, modeling, rendering
Official
Ask natural-language questions across Microsoft 365 Copilot data.
microsoft, copilot, search, email
Official
Query ClickHouse and ClickHouse Cloud columnar warehouses from an AI agent.
database, warehouse, clickhouse, olap
Official
Manage Bitbucket Cloud repos, pipelines, and pull requests from an AI agent.
git, bitbucket, atlassian, pipelines
Official
Read, write, and manage GCS buckets and objects from an AI agent — official Google MCP, local or remote.
google-cloud, gcs, storage, object-storage
Official
Query Google Ads campaigns, metrics, and account performance with GAQL — Google's official MCP.
google-ads, ads, ppc, marketing
Full Supabase access: database, auth, storage, and edge functions.
supabase, database, backend, postgres
Inspect Figma designs, components, and variables from an agent — the widely adopted community server.
figma, design, design-to-code, components
Official
Hosted, isolated Chromium runtime for AI agents that need a fresh browser per task.
browser, cloud, browserbase, automation
Official
AI-native browser automation: act, observe, and extract in plain English.
browser, stagehand, browserbase, ai-automation
Send transactional and broadcast emails via the official Resend MCP.
resend, email, transactional, broadcast
Official
Search indices, inspect mappings, and run queries against Elasticsearch from an AI agent.
database, search, elasticsearch, elastic
Production-grade Postgres MCP with index advice, EXPLAIN, and health checks.
database, sql, postgres, performance
Official
Open-source vector search with payload filtering, self-hostable or managed.
vector-db, qdrant, retrieval, embeddings
Official
AWS's own managed MCP server — run AWS APIs, execute sandboxed scripts, and search AWS documentation under IAM.
aws, cloud, cloudwatch, iam
Official
Official Mapbox MCP — geocoding, directions, isochrones, search, and tiles across the Mapbox API surface.
mapbox, maps, geocoding, directions
Official
Official Salesforce MCP — SOQL queries, metadata deploy/retrieve, Apex tests, and org management from AI clients.
salesforce, crm, soql, apex
Official
Scrape any URL, render JavaScript, and reach geo-restricted data — official Oxylabs Web Scraper MCP.
oxylabs, scraping, serp, ecommerce
Full GitLab API access: repos, MRs, issues, pipelines, and registries.
git, gitlab, repos, mrs
Triage errors, inspect traces, and query events from Sentry.
sentry, errors, monitoring, observability
Official
Manage Jira, Confluence, and Compass via the official Atlassian Rovo MCP.
atlassian, jira, confluence, rovo
Official
Live SERP, keyword, backlink, and on-page SEO data for an AI agent.
seo, serp, keywords, backlinks
Official
Query GA4 reports, funnels, and realtime data from an AI agent.
analytics, ga4, google-analytics, reporting
Inspect and manage Kubernetes clusters through kubectl-equivalent tools, with a non-destructive mode.
kubernetes, k8s, kubectl, helm
Read and write notes in your local Obsidian vault.
obsidian, notes, markdown, pkm
Local-first agent memory as plain Markdown — a semantic knowledge graph you and the agent can both read.
memory, markdown, knowledge-graph, obsidian
Official
2,800+ apps and managed OAuth via Pipedream's hosted MCP at mcp.pipedream.com.
pipedream, automation, workflows, oauth
In-process analytical SQL over files and Parquet from an AI agent.
database, olap, duckdb, parquet
Official
Manage Droplets, App Platform, Kubernetes, and Spaces from an AI agent.
digitalocean, hosting, cloud, kubernetes
Score npm, PyPI, Go, and Maven dependencies for supply-chain and vulnerability risk before an agent installs them.
socket, security, supply-chain, dependencies
Official
Managed vector database for semantic search and retrieval in AI agents.
vector-db, pinecone, retrieval, embeddings
Official
Manage Heroku apps, dynos, add-ons, and Postgres from an AI agent.
heroku, hosting, paas, postgres
Official
Ad-free, high-quality web search and page-to-markdown extraction from an AI agent.
kagi, search, ad-free, extraction
Send messages and read channel history from a Telegram bot in an agent.
communication, messaging, telegram, bot
Real-time web search with privacy-focused results.
search, web, realtime, news
Run read-only MySQL queries and inspect schemas from an AI agent.
database, sql, mysql, mariadb
Official
Official Plaid MCP — developer sandbox tooling and dashboard diagnostics, not a live bank-data connector.
plaid, fintech, banking-api, developer-tools
Open-source agentic browser automation that handles login walls and CAPTCHAs.
browser, agent, skyvern, vision
Outlook mail and calendar, Teams, OneDrive and Excel through one Graph API server.
microsoft, outlook, calendar, email
Official
Read dynamic and static secrets from HashiCorp Vault inside agent workflows.
security, secrets, vault, hashicorp
Geocoding, place search, directions, and travel times from Google Maps.
maps, geocoding, places, directions
Read, create, and manage events across Google Calendar — via Google's official remote MCP or a self-hosted community server.
google-calendar, scheduling, events, productivity
AI-driven task management and decomposition for long-running agent projects.
agent, tasks, planning, persistence
Official
Run QuickBooks Online accounting from an agent — invoices, bills, payments, and financial reports.
quickbooks, accounting, invoicing, bookkeeping
Manage Mailgun messaging, domains, webhooks, and analytics from an AI agent.
mailgun, email, transactional, analytics
Inject secrets from Doppler into agent workflows without exposing values in chat.
security, secrets, doppler, credentials
Send transactional email from an AI agent — verified deliverability, audit-friendly.
email, postmark, transactional, deliverability
Query webpages with structured natural language — selectors written for you.
scraping, agentql, extraction, queries
Read and send Slack messages, manage channels and threads — the token-based community server, no admin approval needed.
slack, messaging, communication, automation
Read and post to Discord channels — community management for AI agents.
discord, chat, community, bot
Query Search Console clicks, impressions, and queries from an AI agent.
seo, search-console, gsc, organic-search
Open-source SAST scanning against custom rules from an AI agent.
security, sast, semgrep, static-analysis
Official
Embedded and hosted vector database for AI agents — open source, zero-ops.
vector-db, chroma, embeddings, retrieval
Official
Manage subscriptions, transactions, products, prices, and financial reports on Paddle — official MCP.
paddle, billing, subscriptions, saas
Official
Official Xero MCP — invoices, contacts, bank transactions, and accounting from an agent.
xero, accounting, invoicing, bookkeeping
Official
Process payments and manage orders, catalog, inventory, and bookings on Square — official MCP.
square, payments, point-of-sale, commerce
Read and create events in Apple Calendar via CalDAV from any MCP client.
calendar, apple, caldav, icloud
Capture context and decisions across sessions — durable agent memory in markdown.
agent, memory, context, persistence
Official
Turn Make.com on-demand scenarios into agent-callable tools — official MCP.
make-com, automation, workflows, integromat
Official
Hosted Chromium with proxies and anti-bot evasion for AI agents.
browser, automation, hyperbrowser, proxies
Send email and inspect deliverability via SendGrid from an AI agent.
email, sendgrid, transactional, deliverability
Local SQLite database access with full read/write support.
database, sqlite, local, storage
Official
Send SMS, WhatsApp, and voice calls from an AI agent via Twilio.
communication, sms, whatsapp, voice
Archived
Anthropic's reference Postgres MCP — archived July 2025 and superseded by Postgres MCP Pro or the Supabase MCP.
database, sql, postgres, archived
Trigger Make scenarios and inspect runs from an AI agent.
automation, workflow, make, integromat
Route one prompt across 300+ LLMs with a single API key.
ai, llm, openrouter, inference
Inspect deployments, logs, and project state on Vercel from an AI agent.
vercel, hosting, deployment, nextjs
Official
Read products, orders, and inventory from your Shopify store.
shopify, ecommerce, products, orders
10 minMedium
Official
Create invoices, capture orders, issue refunds, and track disputes on PayPal — official MCP.
paypal, payments, invoices, refunds
Archived
Search and read Google Drive files from an AI agent (archived reference implementation).
google-drive, storage, filesystem, documents
Official
Built-in MCP for Inngest functions, events, runs, and docs — zero auth, zero config.
inngest, events, workflows, dev-server
< 1 minLow
Archived
Fire IFTTT applets via webhooks from an AI agent. Community MCP wrapper archived; IFTTT itself is unaffected.
automation, webhooks, ifttt, integration
Turn a vague goal into a dependency-tracked task graph an agent can execute step by step.
task-management, decomposition, planning, chain-of-thought
Official
Expose 8,000+ Zapier integrations as tools your AI agent can call.
zapier, automation, integrations, workflow
5 minLow
Register and manage Name.com domains via the official MCP, auto-generated from their OpenAPI.
name-com, domains, registrar, dns
Official
Browse, search, and Q&A across Box content from an AI agent — official remote MCP.
box, storage, enterprise, content
Inject 1Password secrets into an AI agent's tool calls without exposing them in chat.
security, secrets, 1password, vault
8 minLow
Official
Official Foursquare Places MCP — POI search, GeoTagging, and rich place metadata across 100M+ places.
foursquare, places, poi-search, geocoding
Official Attio MCP — natural-language CRM control across records, lists, and notes via OAuth.
attio, crm, sales, pipeline
< 1 minLow
Create records, update deals, and run Zoho CRM actions from an AI agent — official Zoho MCP.
zoho, crm, sales, deals
10 minMedium
Manage leads, contacts, opportunities, and tasks in Close from an AI agent — official scoped MCP.
close, crm, sales, leads
5 minLow
Official
Pull keyword, backlink, traffic, and competitor data into an AI agent — official Semrush MCP.
semrush, seo, keywords, backlinks
3 minLow
Official
Search conversations, contacts, companies, and help articles in Intercom from an AI agent — official MCP.
intercom, support, customer-messaging, fin
5 minLow
Full browser automation: navigate, click, screenshot, and scrape.
browser, automation, scraping, puppeteer
Search, inspect, and run Hugging Face models and datasets from an agent.
huggingface, ml, models, inference
Run any open-source model on Replicate from inside an AI agent.
ai, ml, replicate, inference
3 minLow
Archived
Scan code and dependencies for vulnerabilities from an AI coding assistant. Standalone MCP package archived; Snyk itself remains current via its IDE integrations.
security, vulnerabilities, sast, sca
Archived
Trigger and manage n8n workflows from an AI agent. Community MCP wrapper archived; n8n itself is unaffected.
automation, workflow, n8n, integration
Self-hosted Git server — manage repos, issues, and PRs from an AI agent.
git, gitea, forgejo, codeberg
10 minMedium
Archived
Secure cloud sandboxes for executing AI-generated code — npm MCP package archived; vendor recommends the hosted E2B platform.
coding, execution, sandbox, cloud
Official
Official HubSpot MCP server — CRM contacts, deals, and meeting scheduling from Claude or Cursor.
hubspot, crm, meetings, scheduling
10 minLow
Official
Spin up Railway projects, services, and deploys via remote MCP with OAuth.
railway, hosting, deployment, paas
2 minLow
Send, read, search, and label Gmail from an AI agent — community MCP with auto-OAuth.
gmail, email, community, google
Official
Cross-repo code search, navigation, and Deep Search via the official Sourcegraph MCP.
sourcegraph, code-search, navigation, deep-search
10 minMedium
Enterprise iPaaS — trigger Workato recipes from an AI agent.
automation, workflow, workato, ipaas
12 minMedium
Official
Official Fireflies remote MCP — query meeting transcripts, AI summaries, and action items via OAuth or API key.
fireflies, meeting-notes, transcripts, ai-summaries
2 minLow
Official
Official Fathom remote MCP — access meeting recordings, transcripts, summaries, and webhooks from any MCP client.
fathom, meeting-notes, transcripts, recordings
2 minLow
Manage Linear issues, projects, and cycles from AI context.
linear, project-management, issues, productivity
5 minMedium
Archived
Vector database with first-class hybrid (vector + keyword) and modular embeddings (MCP server archived — package no longer published).
vector-db, weaviate, hybrid-search, retrieval
Archived
Multi-model orchestration — let Claude consult Gemini, GPT, and o-series as sub-agents. Upstream community repository archived; no further maintenance.
agent, orchestration, multi-model, consensus
Archived
Deploy and manage Render web services, static sites, cron jobs, and Postgres from an AI agent. Official MCP server is archived; Render platform is unaffected.
render, hosting, deployment, paas
Archived
Manage Porkbun domains, DNS, DNSSEC, and SSL — read-only by default. Community MCP repository archived; Porkbun itself is unaffected.
porkbun, domains, registrar, dns
Official
Anthropic-verified Fellow Connector — query meeting notes, transcripts, action items, and calendar events from Claude.
fellow, meeting-notes, transcripts, action-items
< 1 minLow
Inspect schemas and run SQL against a Snowflake account from an AI agent.
database, warehouse, snowflake, sql
Self-hosted Slack alternative — read and post from an AI agent.
communication, chat, mattermost, self-hosted
Real-time and forecast weather data via the OpenWeatherMap API.
weather, forecast, openweathermap, lifestyle
FAQ: MCP in Codex CLI
Where does Codex CLI store its MCP config?
In `config.toml`, with MCP servers under `[mcp_servers.<name>]` subtables. By default that is `~/.codex/config.toml` (user-level, every repo). Codex also reads a project-scoped `.codex/config.toml` in the project root, but only for trusted projects — so you can keep a per-repo MCP set without applying it to untrusted checkouts.
How is the config different from Claude Desktop or Cursor?
Shape-wise it is the same — `command`, `args`, optional `env` — but the format is TOML instead of JSON, and keys use `[mcp_servers.<name>]` subtables instead of the `{"mcpServers": {...}}` nesting you see in JSON clients.
Can I share MCP config across my team in Codex?
Yes — commit a project-scoped `.codex/config.toml` with the `[mcp_servers.*]` blocks at the repo root. Teammates who trust the project get the same servers automatically. Keep secrets out of it: use `${VAR_NAME}` interpolation in `env`, or `bearer_token_env_var` for HTTP servers, so the committed file holds placeholders only.
Does Codex CLI support env var interpolation?
Yes. Inside the `env = { ... }` inline table you can reference `${VAR_NAME}` and Codex resolves it from the shell at launch. That lets you keep tokens out of the committed config while still passing them to the MCP process.
Why does Codex call them "mcp_servers" (plural) and not "mcpServers"?
TOML convention. Codex's config is snake_case throughout, and `mcp_servers` matches the style of its other subtables (`model`, `tools`, `projects`). The underlying MCP protocol is unchanged — only the config-file shape differs.
Browse every MCP server → top-mcps.com