# CodexPluginDoctor MCP server

> Validates Codex plugin packages, skills, and MCP server bundles for security, structure, and runtime conformance.

- Repository: https://github.com/Esquetta/CodexPluginDoctor
- Page: https://hostedmcp.org/servers/esquetta/codexplugindoctor
- Transport: stdio
- Stars: 2
- License: MIT

## Install

### Claude Code

```sh
claude mcp add codexplugindoctor -- npx -y codex-plugin-doctor
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "codexplugindoctor": {
      "command": "npx",
      "args": [
        "-y",
        "codex-plugin-doctor"
      ]
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "codexplugindoctor": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "codex-plugin-doctor"
      ]
    }
  }
}
```

### VS Code CLI

```sh
code --add-mcp '{"name":"codexplugindoctor","type":"stdio","command":"npx","args":["-y","codex-plugin-doctor"]}'
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "codexplugindoctor": {
      "command": "npx",
      "args": [
        "-y",
        "codex-plugin-doctor"
      ]
    }
  }
}
```

### Codex

```sh
codex mcp add codexplugindoctor -- npx -y codex-plugin-doctor
```

### Codex config.toml (`~/.codex/config.toml`)

```toml
[mcp_servers.codexplugindoctor]
command = "npx"
args = ["-y", "codex-plugin-doctor"]
```

### Gemini CLI

```sh
gemini mcp add -s user codexplugindoctor npx -- -y codex-plugin-doctor
```

### Gemini settings.json (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "codexplugindoctor": {
      "command": "npx",
      "args": [
        "-y",
        "codex-plugin-doctor"
      ]
    }
  }
}
```

## FAQ

### How can I check if an MCP server has hard-coded secrets?

The tool automatically checks for hard-coded secrets like API keys in the .mcp.json file and will exit with a failure status if any are found.

### Can I test the actual running MCP server with this tool?

Yes, by adding the --runtime flag, the tool will start the plugin's MCP servers and call their tools, resources, and prompts to verify conformance.

### How do I isolate the running MCP servers during testing?

You can use the --sandbox docker flag to isolate local Node.js stdio servers.

### Can I use this tool to check plugins already installed in my cache?

Yes, running npx codex-plugin-doctor check --installed will check the plugins in your Codex plugin cache.