OpenAI Codex CLI inside an aicodebox container. One image, five ways in: interactive shell, one-shot exec, OpenAI-compatible endpoint, MCP server, Telegram bot, and a cron scheduler. You talk to codexbox; codexbox talks to codex; codex talks to OpenAI — or your ChatGPT subscription.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport streamable-http · http
verified
reported
listed in the official MCP registry counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit ede91db · analyzer v33 · 1d ago
skills & prompt files 1
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 16
filesystem 2
- fs psyb0t-docker-codexbox-ede91db/codexbox/codexbox/adapter.py :23
from pathlib import Path - fs (weak) psyb0t-docker-codexbox-ede91db/codexbox/tests/test_adapter.py :21
from pathlib import Path
declared dependencies 83
- anyio@==4.14.2 \
- ast-serialize@==0.6.0 \
- autoflake@==2.3.3 \
- backports-zstd@==1.6.0 \
- beautifulsoup4@==4.15.0 \
- black@==26.5.1 \
- build@==1.5.0 \
- cachecontrol@==0.14.4 \
- certifi@==2026.6.17 \
- cffi@==2.1.0 \
- charset-normalizer@==3.4.9 \
- cleo@==2.1.0 \
- click@==8.4.2 \
- coverage@==7.15.1 \
- crashtest@==0.4.1 \
- cryptography@==49.0.0 \
- distlib@==0.4.3 \
- dulwich@==1.2.10 \
- fastjsonschema@==2.21.2 \
- filelock@==3.29.7 \
- findpython@==0.8.0 \
- flake8@==7.3.0 \
- h11@==0.16.0 \
- httpcore@==1.0.9 \
- httpx@==0.28.1 \
- idna@==3.18 \
- iniconfig@==2.3.0 \
- installer@==1.0.1 \
- isort@==8.0.1 \
- jaraco-classes@==3.4.0 \
- jaraco-context@==6.1.2 \
- jaraco-functools@==4.5.0 \
- jeepney@==0.9.0 \
- keyring@==25.7.0 \
- librt@==0.13.0 \
- lxml@==6.1.1 \
- mccabe@==0.7.0 \
- more-itertools@==11.1.0 \
- msgpack@==1.2.1 \
- mypy@==2.3.0 \
- mypy-extensions@==1.1.0 \
- nodeenv@==1.10.0 \
- packaging@==26.2 \
- pathspec@==1.1.1 \
- pbs-installer@==2026.6.10 \
- pipenv@==2026.6.2 \
- pkginfo@==1.12.1.2 \
- platformdirs@==4.10.0 \
- pluggy@==1.6.0 \
- poetry@==2.4.1 \
- poetry-core@==2.4.0 \
- pycodestyle@==2.14.0 \
- pycparser@==3.0 \
- pyflakes@==3.4.0 \
- pygments@==2.20.0 \
- pyproject-hooks@==1.2.0 \
- pyright@==1.1.411 \
- pytest@==9.1.1 \
- pytest-cov@==7.1.0 \
- python-discovery@==1.4.4 \
- pytokens@==0.4.1 \
- pyyaml@==6.0.3 \
- rapidfuzz@==3.14.5 \
- requests@==2.34.2 \
- requests-toolbelt@==1.0.0 \
- secretstorage@==3.5.0 \
- setuptools@==83.0.0 \
- shellingham@==1.5.4 \
- soupsieve@==2.8.4 \
- toml@==0.10.2 \
- tomlkit@==0.15.0 \
- trove-classifiers@==2026.6.1.19 \
- typing-extensions@==4.16.0 \
- urllib3@==2.7.0 \
- virtualenv@==21.6.1 \
- vulture@==2.16 \
- github.com/cweill/gotests@v1.9.0
- github.com/fatih/gomodifytags@v1.17.1-0.20250423142747-f3939df9aa3c
- github.com/go-delve/delve@v1.27.0
- github.com/josharian/impl@v1.5.0
- golang.org/x/tools/gopls@v0.22.0
- honnef.co/go/tools@v0.7.0
- mvdan.cc/gofumpt@v0.10.0