ArmorCodex

Plugin Manifest

{
  "name": "armorcodex",
  "version": "0.3.2",
  "description": "ArmorIQ intent-based security enforcement for Codex: Bash command guardrails with intent verification, optional CSRG cryptographic proofs, and audit logging. Codex hooks currently fire for Bash, apply_patch, and MCP tool calls; non-Bash file/web activity may need supplemental controls. See CODEX_HARNESS_LIMITATIONS.md.",
  "author": {
    "name": "ArmorIQ",
    "email": "[email protected]",
    "url": "https://armoriq.ai"
  },
  "homepage": "https://armoriq.ai",
  "repository": "https://github.com/armoriq/armorCodex",
  "license": "MIT",
  "keywords": [
    "security",
    "policy",
    "audit",
    "intent",
    "armoriq",
    "mcp",
    "hooks"
  ],
  "hooks": "./.codex/hooks.json",
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "ArmorCodex",
    "developerName": "ArmorIQ",
    "shortDescription": "Intent-based security policy and audit for Codex.",
    "longDescription": "ArmorIQ intent-based security enforcement for OpenAI Codex. Treat as a strong Bash guardrail and audit layer, not a complete boundary for every Codex capability. Codex hooks currently emit Bash, apply_patch, and MCP tool calls. ArmorCodex provides plan registration through MCP, intent-plan matching, permission gating, and post-run audit on those tools. Non-Bash activity (file edits, web search, app connectors) is gated where Codex emits hook events.",
    "category": "Security",
    "capabilities": [
      "MCP",
      "Hooks"
    ],
    "websiteURL": "https://armoriq.ai",
    "privacyPolicyURL": "https://armoriq.ai/privacy-policy",
    "termsOfServiceURL": "https://armoriq.ai/terms-of-service",
    "brandColor": "#00E5CC",
    "composerIcon": "./assets/armoriq-logo.png",
    "logo": "./assets/armoriq-logo.png",
    "defaultPrompt": [
      "Show me what security rules are protecting this project.",
      "Block any commands that fetch URLs or exfiltrate data.",
      "Walk me through your plan before running anything."
    ]
  },
  "userConfig": {
    "api_key": {
      "type": "string",
      "title": "ArmorIQ API Key",
      "description": "Your ArmorIQ API key (get one at https://armoriq.ai). Leave blank to run in local-only mode without backend audit/intent.",
      "sensitive": true
    },
    "mode": {
      "type": "string",
      "title": "Enforcement Mode",
      "description": "enforce = block on policy/intent failures (recommended). monitor = log only, never block.",
      "sensitive": false
    },
    "intent_required": {
      "type": "boolean",
      "title": "Require Intent Plan",
      "description": "When true, every Bash command must be backed by a registered intent plan (Codex hooks currently only intercept Bash). Disable for advisory-only use.",
      "sensitive": false
    },
    "crypto_policy_enabled": {
      "type": "boolean",
      "title": "Enable Crypto Policy Binding",
      "description": "Bind policy rules to a Merkle tree so post-issuance tampering is detected.",
      "sensitive": false
    },
    "use_production": {
      "type": "boolean",
      "title": "Use Production Endpoints",
      "description": "When true, talks to ArmorIQ production. When false, expects a local backend on 127.0.0.1.",
      "sensitive": false
    }
  },
  "registryIndexVersion": 5
}

File Inventory