Codex CLI

Before you start

• A running server. Examples use staging, https://dev.nexara.ac; replace it with your own origin. Production will be https://app.nexara.ac.
• An agent key: in the app open Agents, New agent, then Create agent and key. Copy the nxc_ key (shown once) and export it: export NEXARA_KEY=nxc_....
• The MCP URL is https://dev.nexara.ac/mcp. https://dev.nexara.ac/w/<workspace>/mcp also works and refuses keys from other workspaces.

Configure

Add to ~/.codex/config.toml:

[mcp_servers.nexara]
url = "https://dev.nexara.ac/mcp"
bearer_token_env_var = "NEXARA_KEY"

and export the key in your shell profile:

export NEXARA_KEY="nxc_..."

Codex reads the bearer token from the environment at start-up. To expose only the read tools, add:

enabled_tools = ["context_bundle", "context_search", "context_get", "context_tree", "context_related", "context_whoami"]

Verify

Ask the agent to call context_whoami. It returns the agent name, workspace and grants. Or run:

curl -s https://dev.nexara.ac/mcp \
  -H "Authorization: Bearer $NEXARA_KEY" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"context_whoami","arguments":{}}}'

Troubleshooting