Potencia tu agente
Instalación del publicador. No es un endpoint de PlugMCP.
Host a copy with our keys and logs.
Aún no hay una versión empaquetada en el registro. Sigue el README del repositorio.
¿URL remota o un comando en tu máquina? En qué se diferencian las dos instalaciones
Ejecutar en PlugMCP
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
AbrirDel publicador
codex-safe-git is a local MCP server that gives Codex a narrow, auditable Git tool
surface. It is designed for safe local branch, worktree, status, review, and exact-file
commit workflows without exposing arbitrary Git commands or shell execution.
Local-first MCP server that gives sandboxed Codex a narrow, auditable Git workflow surface.
The server is local-first: no telemetry, no remotes, no network Git operations, no binary release assets, and no package-manager distribution. Public installation uses Go's command installer.
The Go server exposes exactly these MCP tools:
git_status(repo_path)git_diff_summary(repo_path)list_local_branches(repo_path)compare_refs(repo_path, base_ref, target_ref)commit_log_summary(repo_path, ref?, limit?)show_commit_summary(repo_path, commit_ref)list_local_refs(repo_path)merge_base(repo_path, left_ref, right_ref)changed_files_between_refs(repo_path, base_ref, target_ref)path_status(repo_path, paths[], include_ignore_source?)submodule_summary(repo_path)repository_integrity_check(repo_path)reflog_summary(repo_path, ref?, limit?)self_check(repo_path)commit_files(repo_path, files[], message, body?)ensure_commit_branch(repo_path, branch_name)create_commit_branch(repo_path, branch_name)merge_branch(repo_path, source_branch, target_branch?)list_worktrees(repo_path)create_worktree(repo_path, worktree_path, branch_name, base_branch?)safe_checkout(repo_path, branch_name)No tool accepts arbitrary Git arguments, shell commands, remotes, force options, push, pull, fetch, reset, clean, rebase, tag mutation, package publishing, deployment, or PR creation.
Safety-critical guarantees include:
main, master, repository defaults, and configured namesSee MCP contract, security invariants, and threat model for the durable guarantees.
Install the command directly:
go install github.com/K1-R1/codex-safe-git/cmd/codex-safe-git-mcp@latest
mkdir -p "$HOME/.codex/worktrees" "$HOME/.codex/log"
codex-safe-git-mcp --print-config
For repeatable installs, use a release tag such as @v0.4.3 instead of @latest.
If $(go env GOPATH)/bin is not on PATH, run the installed binary by absolute path. See
Distribution for the full public and source-tree install paths.
For source-tree development, run verification first:
scripts/verify.sh
Then install the stable local binary and print the Codex MCP config:
scripts/install-local.sh --dry-run
scripts/install-local.sh
scripts/install-local.sh --verify-install
The installer builds the Go binary, installs it under ~/.codex/tools/codex-safe-git-go,
writes a SHA-256 sidecar checksum, and prints a TOML config block for Codex App and Codex
CLI.
Requirements:
shasum or sha256sumUseful commands:
go test ./...
go test -race ./...
scripts/smoke-stdio.sh
scripts/verify.sh
This repository ships public source releases through Go module tags. The supported distribution path
is go install; Homebrew/package-manager distribution, binary release assets, automated publishing,
and external release services remain deferred until there is an explicit maintainer decision.
See CONTRIBUTING.md for development setup and contribution guidelines.
See SECURITY.md for supported security reporting expectations.
MIT - see LICENSE.
Local-first MCP server that gives sandboxed Codex a narrow, auditable Git workflow surface.
Herramientas
Aún no hay lista de herramientas. Los servidores remotos la reciben tras la primera comprobación de estado.
Preguntas frecuentes
Copia en esta página la configuración stdio para Cursor, Claude Desktop, Claude Code o VS Code. Usa la instalación del publicador, no un proxy de PlugMCP.
Este registro no indica ninguna variable de entorno obligatoria.
Codex Safe Git se ejecuta localmente por stdio.
Última comprobación: 2026-10-28. Local-first MCP server that gives sandboxed Codex a narrow, auditable Git workflow surface.
