Install Dependency Vulnerability Tracker — package security advisories ($0.01/query) in Codex
What you need first
- Codex, installed.
- Nothing else: the server runs on its publisher's machines and Codex connects to it.
Steps
- Run this in a terminal. It writes the server into
~/.codex/config.toml, which the Codex CLI, its IDE extension and the ChatGPT desktop app share.
codex mcp add data-dependency-vulnerability-malicious-package-security --url https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http- Start Codex again and type
/mcp: the server is listed.
Check it worked
Ask Codex: List the tools of data-dependency-vulnerability-malicious-package-security.
If it does not start
- 401 Unauthorized
- The endpoint wants a sign-in or a key. Sign in when Codex asks.
Back to Dependency Vulnerability Tracker — package security advisories ($0.01/query)