- Notifications
You must be signed in to change notification settings - Fork3k
Add installation guide for OpenAI Codex#1340
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.
Already on GitHub?Sign in to your account
base:main
Are you sure you want to change the base?
Changes fromall commits
17a449a458caf95625dec4a09dded954fc10d106f7d9bd86f4fb15c1fe5ef2279fca9dFile filter
Filter by extension
Conversations
Uh oh!
There was an error while loading.Please reload this page.
Jump to
Uh oh!
There was an error while loading.Please reload this page.
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
| @@ -0,0 +1,107 @@ | ||||||
| # Install GitHub MCP Server in OpenAI Codex | ||||||
| ## Prerequisites | ||||||
| 1. OpenAI Codex (MCP-enabled) installed / available | ||||||
| 2. A [GitHub Personal Access Token](https://github.com/settings/personal-access-tokens/new) | ||||||
| <details> | ||||||
| <summary><b>Storing Your PAT Securely</b></summary> | ||||||
| <br> | ||||||
| For security, avoid hardcoding your token. One common approach: | ||||||
| 1. Store your token in `.env` file | ||||||
| ``` | ||||||
| GITHUB_PAT_TOKEN=ghp_your_token_here | ||||||
| ``` | ||||||
| 2. Add to .gitignore | ||||||
| ```bash | ||||||
| echo -e ".env" >> .gitignore | ||||||
| ``` | ||||||
| </details> | ||||||
| > The remote GitHub MCP server is hosted by GitHub at `https://api.githubcopilot.com/mcp/` and supports Streamable HTTP. | ||||||
| ## Remote Configuration | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. I would put this above the | ||||||
| Edit `~/.codex/config.toml` (shared by CLI and IDE extension) and add: | ||||||
| ```toml | ||||||
| [mcp_servers.github] | ||||||
| url = "https://api.githubcopilot.com/mcp/" | ||||||
| # Replace with your real PAT (least-privilege scopes). Do NOT commit this. | ||||||
| bearer_token_env_var = "GITHUB_PAT_TOKEN" | ||||||
| ``` | ||||||
Comment on lines +31 to +36 There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. You can also recommend | ||||||
| ## Local Docker Configuration | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. Why would somebody want the local docker configuration? | ||||||
| Use this if you prefer a local, self-hosted instance instead of the remote HTTP server, please refer to the [OpenAI documentation for configuration](https://developers.openai.com/codex/mcp). | ||||||
| ## Verification | ||||||
jamesmontemagno marked this conversation as resolved. Show resolvedHide resolvedUh oh!There was an error while loading.Please reload this page. | ||||||
| After starting Codex (CLI or IDE): | ||||||
| 1. Run `/mcp` in the TUI or use the IDE MCP panel; confirm `github` shows tools. | ||||||
| 2. Ask: "List my GitHub repositories". | ||||||
| 3. If tools are missing: | ||||||
| - Check token validity & scopes. | ||||||
| - Confirm correct table name: `[mcp_servers.github]`. | ||||||
| ## Usage | ||||||
| After setup, Codex can interact with GitHub directly. It will use the default tool set automatically but can be [configured](../../README.md#default-toolset). Try these example prompts: | ||||||
| **Repository Operations:** | ||||||
| - "List my GitHub repositories" | ||||||
| - "Show me recent issues in [owner/repo]" | ||||||
| - "Create a new issue in [owner/repo] titled 'Bug: fix login'" | ||||||
| **Pull Requests:** | ||||||
| - "List open pull requests in [owner/repo]" | ||||||
| - "Show me the diff for PR #123" | ||||||
| - "Add a comment to PR #123: 'LGTM, approved'" | ||||||
| **Actions & Workflows:** | ||||||
| - "Show me recent workflow runs in [owner/repo]" | ||||||
| - "Trigger the 'deploy' workflow in [owner/repo]" | ||||||
| **Gists:** | ||||||
| - "Create a gist with this code snippet" | ||||||
| - "List my gists" | ||||||
| > **Tip**: Use `/mcp` in the Codex UI to see all available GitHub tools and their descriptions. | ||||||
| ## Choosing Scopes for Your PAT | ||||||
| Minimal useful scopes (adjust as needed): | ||||||
| - `repo` (general repository operations) | ||||||
| - `workflow` (if you want Actions workflow access) | ||||||
| - `read:org` (if accessing org-level resources) | ||||||
| - `project` (for classic project boards) | ||||||
| - `gist` (if using gist tools) | ||||||
| Use the principle of least privilege: add scopes only when a tool request fails due to permission. | ||||||
| ## Troubleshooting | ||||||
| | Issue | Possible Cause | Fix | | ||||||
| |-------|----------------|-----| | ||||||
| | Authentication failed | Missing/incorrect PAT scope | Regenerate PAT; ensure `repo` scope present | | ||||||
| | 401 Unauthorized (remote) | Token expired/revoked | Create new PAT; update `bearer_token` | | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. Suggested change
| ||||||
| | Server not listed | Wrong table name or syntax error | Use `[mcp_servers.github]`; validate TOML | | ||||||
| | Tools missing / zero tools | Insufficient PAT scopes | Add needed scopes (workflow, gist, etc.) | | ||||||
| | Token in file risks leakage | Committed accidentally | Rotate token; add file to `.gitignore` | | ||||||
| ## Security Best Practices | ||||||
| 1. Never commit tokens into version control | ||||||
| 2. Prefer environment variables or secret managers | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. Suggested change
This should be adequately covered by the configuration options | ||||||
| 3. Rotate tokens periodically | ||||||
| 4. Restrict scopes up front; expand only when required | ||||||
| 5. Remove unused PATs from your GitHub account | ||||||
| ## References | ||||||
| - Remote server URL: `https://api.githubcopilot.com/mcp/` | ||||||
| - Release binaries: [GitHub Releases](https://github.com/github/github-mcp-server/releases) | ||||||
| - OpenAI Codex MCP docs: https://developers.openai.com/codex/mcp | ||||||
| - Main project README: [Advanced configuration options](../../README.md) | ||||||
Uh oh!
There was an error while loading.Please reload this page.