Codex deprecates codex mcp-server — switch to the app server
A CLI patch retires codex mcp-server; separately, Cloudflare and Snowflake expose how much your agents are quietly allowed to write and delete.
Copy markdown
codex mcp-server is now deprecated
Codex CLI 0.149.1 (Aug 24) deprecates the `codex mcp-server` command and points you to the Codex app server instead. If you expose Codex to Claude Desktop, Cursor, or any client over MCP, that launch command is on its way out — migrate before a later release removes it.
What else the 0.149 line shipped
The same release train added a `codex queue` command to message a running session, an interactive agents dashboard, expanded Vim keybindings, and Amazon Bedrock Runtime as a built-in model provider. Worth a pass while you're bumping the CLI.
Cloudflare WriteGuard puts a firewall on MCP writes
WriteGuard (private beta) intercepts MCP calls and enforces per-tool write policies — block production deploys or bulk deletes without touching the server code. It rides your existing OAuth creds and logs every agent action with user and outcome. Worth wiring up as agents get more write access.
Snowflake's CoCo agents run as all your roles
Snowflake's CoCo automations (CLI + Snowsight preview) execute agent tasks with the caller's full role set, and the task is granted to PUBLIC by default — so a shared automation can act as everyone. Revoke the PUBLIC grant and scope the role before you ship one.