Privacy-aware trajectory viewer for local Codex task logs
Server has 5 tools with basic schemas and descriptions, but significant gaps in parameter documentation and output schema clarity. Tool names follow verb_noun convention (list_, get_, set_) which is good. However, most parameter descriptions are minimal (1-2 words), and output schemas are not documented anywhere in the provided source. No error handling guidance visible. The session_index.py code shows robust internal validation but this is not exposed to the MCP interface. Descriptions range 34-89 chars (within baseline 34-392), but parameter annotations are sparse or missing entirely.
Check the status of the optional Codex toolbar injection for browser shortcuts
Retrieve the full trajectory for a Codex session with optional filtering
Get incremental updates to a Codex trajectory since a specified point
List available Codex sessions from local task logs
Enable or disable the optional Codex toolbar injection for browser shortcuts
Output schemas not documented. No tool returns a documented response structure. LLMs cannot plan downstream calls or extract required fields without knowing what fields are returned.
Parameter descriptions are minimal or missing. 'sessionId' has description 'The session identifier' (generic); 'sinceTimestamp' has 'Unix timestamp to fetch updates since' (lacks format/range guidance). LLMs cannot validate inputs without explicit constraints.
No error handling guidance. No tool description explains what happens on failure (e.g., session not found, invalid timestamp, permission denied). Agents cannot recover from errors without explicit recovery hints.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 62 | 2025-06-18+ | v2 |
Pagination not documented. get_codex_trajectory accepts 'maxRecords' but no cursor, offset, or total_count guidance. Large result sets could exhaust context without pagination support.
Tool annotations missing. set_codex_toolbar_injection is a write operation but has no destructiveHint or idempotentHint. Agents cannot distinguish safe from risky calls.