Back to Project Desk

Codex Setup

Trust Project Desk once for routine, reversible queue work. Destructive one-way doors are not exposed on the hosted MCP tool surface.

Connector URL

Use this URL when adding Project Desk as an MCP server in Codex Desktop:

https://www.atlier.ai/mcp
OAuth account-scoped

Trusted Routine Tools

These tools are reversible, account-scoped queue actions and are safe to trust once for normal desk work.

  • atlier_project_scan
  • atlier_issue
  • atlier_issue_update
  • atlier_issue_move
  • atlier_issue_close
  • atlier_handoff
  • atlier_return_resolve

Still Gated

Project deletes, hard deletes, admin backdoors, force-style one-way doors, and secret/admin-key operations are not silently trusted. The hosted connector does not register destructive tools.

Codex Config Fallback

If Codex Desktop keeps asking for approval after you choose "Allow for this chat", run this local PowerShell check. It backs up your config, adds only the routine Project Desk tool trust entries that are missing, and tells you what changed.

$Config = "$env:USERPROFILE\.codex\config.toml"
if (!(Test-Path $Config)) {
  throw "Codex config not found at $Config. Connect Project Desk in Codex first, then rerun this script."
}

$Backup = "$Config.bak-projectdesk-tools-$(Get-Date -Format yyyyMMdd-HHmmss)"
Copy-Item $Config $Backup

$Text = Get-Content $Config -Raw
$Tools = @(
  "atlier_project_scan",
  "atlier_issue",
  "atlier_issue_update",
  "atlier_issue_move",
  "atlier_issue_close",
  "atlier_handoff",
  "atlier_return_resolve"
)

$Missing = @()
foreach ($Tool in $Tools) {
  $Header = "[mcp_servers.projectdesk.tools.$Tool]"
  if ($Text -notmatch [regex]::Escape($Header)) {
    $Missing += $Tool
    $Text += "`r`n$Header`r`napproval_mode = `"approve`"`r`n"
  }
}

if ($Missing.Count -eq 0) {
  Write-Host "Project Desk routine tool trust is already configured."
  Write-Host "No changes made. Backup saved to: $Backup"
  return
}

Set-Content -Path $Config -Value $Text -Encoding UTF8
Write-Host "Trusted Project Desk routine tools:"
$Missing | ForEach-Object { Write-Host " - $_" }
Write-Host "Backup saved to: $Backup"
Write-Host "Restart Codex Desktop so the trusted tool settings reload."

Advanced TOML

The PowerShell script appends this trusted-tool block when entries are missing:

[mcp_servers.projectdesk.tools.atlier_project_scan]
approval_mode = "approve"

[mcp_servers.projectdesk.tools.atlier_issue]
approval_mode = "approve"

[mcp_servers.projectdesk.tools.atlier_issue_update]
approval_mode = "approve"

[mcp_servers.projectdesk.tools.atlier_issue_move]
approval_mode = "approve"

[mcp_servers.projectdesk.tools.atlier_issue_close]
approval_mode = "approve"

[mcp_servers.projectdesk.tools.atlier_handoff]
approval_mode = "approve"

[mcp_servers.projectdesk.tools.atlier_return_resolve]
approval_mode = "approve"

Machine-readable setup data is also available at /setup/codex.json.