Codex MCP: one command, no key on disk
OpenAI Codex connects to Mastheads with a single command. It runs the sign-in itself and keeps the token, so nothing is pasted and no key sits in a config file on your machine.
codex mcp add mastheads --url https://api.mastheads.app/v1/mcpCodex stores the token. Disconnect under Settings then Developer ends it.
Coding clients could not connect at all until 11 September 2026. Registration exact-matched the one flow we offer, so any client that also asked for a refresh token - which Codex and most clients expecting a long-lived session do - was refused before it ever reached the consent screen.
Registration now refuses only a client that cannot use the flow we have. We still issue no refresh token, and the registration response says so.
Eleven tools, available to any key. A key created with Read only - which is the default - gets these and nothing else, and cannot spend or publish.
list_domainsThe publications on your accountlist_articlesArticles on a domain. No body - that is get_article's job, and returning 100 bodies blew out the context a list exists to saveget_articleOne article, in fullget_article_sourcesThe sources it was written from, the desk verdicts recorded against it, and the editor of recordread_jobsWhat is running now and how far alongread_quotaArticles left this periodread_settingsHow a domain is configuredread_subscriptionThe plan and its limitspropose_generateReturns a confirm card and a link into the dashboard. It generates nothingget_research_reportA finished research reportget_auditA finished domain audit, and any one of its six views
Five more, listed only to a key created with Full access. The permission is fixed when the key is made: there is no switch to flip afterwards. A full-access key acts as the person who created it, under the same plan allowance and team permissions as the dashboard, and at most 20 paid actions an hour.
write_articleStart one articlewrite_articlesStart a batch, up to 100 rowsrun_researchStart a research reportrun_auditStart a domain auditpublish_articlePut a finished article live on the domain's connected site
On the Growth plan and up, at 120 reads a minute per key. The server is at https://api.mastheads.app/v1/mcp.