# codex-node-repl

> codex-node-repl is an officially published MCP server from OpenAI. Anomity scores its risk at 35 out of 100 (medium). It matches 1 dangerous capability combination.

- **Canonical URL:** https://catalog.anomity.ai/mcp/codex-node-repl
- **Kind:** MCP server
- **Publisher:** OpenAI
- **Trust level:** official
- **Risk score:** 35/100 (medium)
- **Last updated:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/mcp/codex-node-repl

## Why it scored 35

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |
| 2 high-risk capabilities: shell:execute, filesystem:write | +20 | critical |  |
| Persistence + execution risk (medium) | +5 | medium | Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts). |

Clamped result: **35/100**, band **medium**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `shell:execute` | Shell execution | Can run arbitrary shell commands. Combined with network access this becomes effectively a remote shell. |
| `filesystem:read` | Filesystem read | Can read files on the host system. Used for context, indexing, or analysis. |
| `filesystem:write` | Filesystem write | Can create, edit, or delete files on the host system. High-impact capability — anything from helpful edits to planting persistence. |

## Dangerous combinations matched

### Persistence + execution risk (medium)

Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).

Capabilities: `shell:execute`, `filesystem:write`

## Related MCP servers

- [desktop-commander](https://catalog.anomity.ai/mcp/desktop-commander) — risk 100 (critical)
- [angular-cli](https://catalog.anomity.ai/mcp/angular-cli) — risk 75 (high)
- [claude-code-mcp-serve](https://catalog.anomity.ai/mcp/claude-code-mcp-serve) — risk 35 (medium)
- [containerization-assist](https://catalog.anomity.ai/mcp/containerization-assist) — risk 35 (medium)
- [xcodebuildmcp](https://catalog.anomity.ai/mcp/xcodebuildmcp) — risk 35 (medium)
- [task-master](https://catalog.anomity.ai/mcp/task-master) — risk 75 (high)

---

Source: Anomity Security Database (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json