Store the key in your environment
SetAUTOFIRE_MCP_TOKEN in the secure environment used to launch Codex. Avoid adding it to a repository or checking it into a dotfile you share.
Add the server
In~/.codex/config.toml:
enabled_tools set you need. Add lead tools only after creating a key with the matching permission.
Test the connection
Restart Codex, then ask:Recommended approval posture
Keep tool approval set to prompt while onboarding or working with lead data. AutoFire tools are server-side read-only, but the client can still copy returned data into its conversation or provider logs.Troubleshooting
401: the environment variable is missing, malformed, expired, or revoked.- Tool missing: the key does not have the matching permission, or
enabled_toolsexcludes it. - Connection failure: confirm the URL includes
/mcpand restart Codex after changing its environment.