plugin CX Codex GP ChatGPT official · OpenAI

github · openai — Codex plugin: what it does, how to install

Q: How to install github in Codex?

The plugin is located in the `openai/plugins` repository and configured through the `.mcp.json` file.

Q: Is the public OAuth client_secret in .mcp.json safe?

The client ID and secret in `.mcp.json` are public by design and cannot verify request origin. User access and refresh tokens must remain private.

Inspect repositories, triage pull requests and issues, debug CI, and publish code changes using a hybrid GitHub connector and CLI workflow.

Open on GitHub

What github does

The plugin connects Codex and ChatGPT to GitHub using a hybrid connector alongside CLI tools. It handles repository inspections, triage for issues and pull requests, CI failure debugging, and branch updates. The assistant operates directly on code changes without leaving the conversation.

This integration acts as a public OAuth client. Its client ID and client_secret are published openly in .mcp.json. Anyone can copy those values, so they do not verify request origins. Personal access tokens and refresh tokens must remain private.

What it helps with

inspect GitHub repositories
triage pull requests and issues
debug failing CI workflows
publish code changes using git CLI

Example prompts for the agent

Inspect open pull requests and summarize review feedback
Check the failed CI run on the latest commit
Push local branch modifications to GitHub

Questions about github

How to install github in Codex?

The plugin is located in the openai/plugins repository and configured through the .mcp.json file.

What does the github plugin do?

It inspects repositories, triages pull requests and issues, diagnoses CI test failures, and publishes branch changes.

Is the public OAuth client_secret in .mcp.json safe?

The client ID and secret in .mcp.json are public by design and cannot verify request origin. User access and refresh tokens must remain private.

Source text

github · MIT

# GitHub

**Warning: this plugin is a public OAuth client.** Its OAuth client ID and
`client_secret` are intentionally distributed in [`.mcp.json`](.mcp.json).
Anyone can copy these values, so they cannot prove that a request comes from this
plugin. User access and refresh tokens must still be kept private.

For more context, see Okta's
[The Identity of OAuth Public Clients](https://developer.okta.com/blog/2022/06/01/oauth-public-client-identity).

Similar plugins

All plugins for Git and GitHub →

github by other authors comes first.

github official GitHub Official GitHub MCP server for repository management in Claude Code. Handle pull requests, issues, and code reviews directly inside your session. ★ 44,635repo stars project-artifact official Anthropic This plugin builds a living project status page and publishes it as a claude.ai artifact. Later refreshes reread project sources, keep the same URL, and report changes. ★ 44,635repo stars gitlab official GitLab Wires GitLab into Claude Code so the agent can work with repositories, merge requests, pipelines, issues and wikis without leaving the chat. ★ 44,635repo stars commit-commands official Anthropic Three slash commands for git: draft a commit from your changes, take a branch all the way to a pull request, and clear out local branches deleted on the remote. ★ 44,635repo stars code-review official Anthropic Automates pull request reviews in Claude Code using four parallel agents and confidence scoring to filter out false positives. ★ 44,635repo stars work-hub official James Montemagno A cross-repo command center canvas for GitHub Copilot: onboarding, focus planning, repo health, work signals and session cleanup in one place. ★ 40,418repo stars

From the same set337

The whole set →