Skip to main content
Connect Jsmon to OpenAI Codex — both the CLI and desktop app — using the Model Context Protocol (MCP). Once connected, you can run scans, retrieve intelligence data, and manage your Jsmon workspaces directly from Codex conversations.

​
How It Works

Jsmon exposes a remote MCP server using the Streamable HTTP transport at:
Codex supports OAuth-based authentication for remote MCP servers. When you add Jsmon, Codex opens a browser window for you to sign in and approve permissions — no API keys or tokens to manage manually.

​
Connect via Codex CLI

The fastest way to connect is using the Codex CLI:
1

Add the Jsmon MCP Server

Run the following command in your terminal:
2

Authenticate with Jsmon

Trigger the OAuth login flow:
A browser window will open. Sign in to your Jsmon account and approve the requested permissions (read, write, delete, export).
3

Verify the Connection

Confirm the server is registered:
You should see jsmon listed with a connected status.
4

Start Using Jsmon

Launch Codex and start interacting with Jsmon. Ask it to scan targets, view results, or manage workspaces.

​
Connect via Codex Desktop App

1

Open Settings

In the Codex desktop app, go to Settings → Integrations → MCP servers.
2

Add a New Server

Click + Add server and configure:
  • Name: Jsmon
  • Transport: Select Streamable HTTP
  • URL: https://mcp.jsmon.sh/mcp
Leave the bearer token and header fields empty.
3

Authenticate

Click Authenticate. A browser window will open for OAuth authorization. Sign in to your Jsmon account and approve permissions.
4

Save and Restart

Click Save, then restart Codex. Jsmon tools will now be available in your conversations.

​
Manual Configuration (Optional)

You can also edit the Codex config file directly at:
Add the following:
Then run codex mcp login jsmon to complete authentication.

​
What You Can Do

Once connected, ask Codex to:
  • Scan targets — “Scan example.com with Jsmon”
  • View intelligence — “Show secrets found in workspace X”
  • Manage workspaces — “List all my Jsmon workspaces”
  • Monitor domains — “What domains am I monitoring on Jsmon?”
  • Export results — “Export API paths from my latest scan”

​
Permissions

During OAuth authorization, you configure the following scopes:
OAuth tokens refresh automatically. You can revoke access at any time from your Jsmon account settings.