CODEX MCP LEAST-PRIVILEGE CHECKLIST

[ ] Verify the server publisher and source.
[ ] Review the command or remote endpoint before connecting.
[ ] Use narrowly scoped credentials.
[ ] Keep tokens in environment variables or an approved OAuth flow.
[ ] Start with read-only tools.
[ ] Use enabled_tools to limit exposed capabilities.
[ ] Require approval for writes and destructive actions.
[ ] Separate development and production credentials.
[ ] Treat remote content as untrusted data.
[ ] Remove servers that are no longer required.
[ ] Rotate credentials after suspected exposure.