Connect iyedy to Codex
Add iyedy to Codex with one command and work with your architecture diagrams next to your code. Codex reads your models, runs iyedy's checks and prepares changes. It never edits a model itself; you, or someone who can edit the diagram, apply each change in iyedy.
On this page
These steps use the Codex CLI. The Codex IDE extension and the Codex app read the same list of MCP servers, so iyedy added once shows up in all three.
Before you start
- An iyedy account. Sign in once at app.iyedy.com with the identity you will use from Codex, and finish creating your account. Codex sees exactly the diagrams this account can read.
- A recent Codex CLI, signed in to your OpenAI account, on a computer with a web browser. The sign-in comes back to Codex on this computer, so run the command where you work, not over a remote shell.
- In an iyedy organisation (Team, Enterprise), access for MCP clients is off until an owner asks support@iyedy.com to turn it on, and Codex must be on the organisation's list of allowed clients (see In an iyedy organisation). Your personal workspace works right away.
Set up
- Add iyedy to Codex
In a terminal, run:
$ codex mcp add iyedy --url https://app.iyedy.com/mcp$ codex mcp add iyedy \ --url \ https://app.iyedy.com/mcp
Codex adds iyedy to its settings, finds that iyedy uses OAuth and opens your browser. You give no client ID: Codex introduces itself with its own public address, which iyedy knows.
- Sign in to iyedy
The browser opens iyedy's sign-in page on
auth.iyedy.com. Sign in as you do in the app: e-mail and password, Google, or your organisation's single sign-on. - Approve the access
Check that the page is on
auth.iyedy.comand that it names Codex on chatgpt.com, read what Codex asks for, then select Allow.On auth.iyedy.com · the access page for Codex The iyedy access page in the browser: the address bar shows auth.iyedy.com, the card names the application Codex and the site chatgpt.com, lists four permissions and ends with Deny and Allow.
- The address is auth.iyedy.com. Codex never sees your password.
- Who asks: the application Codex, from the site chatgpt.com. Select Allow only when you are adding iyedy yourself, with the command above. If this page opens while you are connecting another server in Codex, or names another app or site, select Deny.
- What Codex will be able to do: read your diagrams, search and analyse impact, preview changes and submit proposals, and stay connected while you are away. Nothing here edits, deletes or shares a diagram.
- Allow hands the sign-in back to Codex, which keeps it for you.
- Ask Codex
Back in the terminal, Codex prints Successfully logged in. Start Codex and try: “List my iyedy diagrams and explain how the claims platform is built.”
You are done when Codex answers with the names of your own diagrams.
If the browser did not open, or you closed it too early, sign in again at any time:
$ codex mcp login iyedyUse it
Name iyedy in your request when you want Codex to use your diagrams. Try:
- “What depends on the Claims API? Show me the impact across my diagrams.”
- “Run the checks on the Claims Platform diagram and summarise the findings.”
- “Compare the containers view of the Claims Platform with the services in this repository.”
- “Prepare a proposal that adds a Fraud Scoring service called by the Claims API.”
Codex may ask you to approve a tool call before it runs it, depending on your Codex settings.
What Codex can do
Codex picks the tools from your request. Reading tools never change anything. The two tools that store something only reach a proposal, never the model.
Read and analyse
Diagrams, views, versions, findings, dependencies across diagrams.
Propose a change
Preview a change, then submit it as a proposal that a person reviews in iyedy.
A proposal from Codex waits in iyedy, labelled with the app it came from, until someone who can edit the diagram applies or rejects it. A proposal nobody handles is deleted 30 days after it was made.
What Codex sees, what stays in iyedy
- It acts as you. Codex reaches the same workspaces, diagrams and roles as your iyedy account, never more. A diagram you cannot open does not exist for it.
- Up to a ceiling. Confidential on personal workspaces, Internal on Team and Enterprise. Restricted diagrams are never sent. Values that look like secrets are replaced before they leave iyedy.
- Nothing changes without a person. Codex can submit a proposal or withdraw its own; you, or someone who can edit the diagram, apply it in iyedy.
- Your data. iyedy does not use your diagrams to train AI models. What Codex does with what it reads is covered by your OpenAI account terms and your workspace's settings.
Full details: Assistants connected through MCP and the Privacy policy.
Disconnect
- In Codex. Forget the sign-in, and remove iyedy from Codex if you no longer need it:
$ codex mcp logout iyedy$ codex mcp remove iyedy- On iyedy's side. There is no screen for this yet: write to support@iyedy.com. Support removes Codex's access, which also ends its renewals; an access already issued stays valid for the rest of its 15 minutes.
See Sign-in, permissions and disconnecting.
In an iyedy organisation
In Team and Enterprise, access for MCP clients stays off until an owner writes to support@iyedy.com. Codex connects only when the organisation's list of allowed clients names it: without a list, a Team organisation allows Claude and Claude Code only, and an Enterprise organisation none. The owner asks support to add Codex. Members then connect Codex with their own iyedy account, under the organisation's ceiling and its single sign-on. See Claude and MCP for your organisation.
If it doesn't work
The sign-in page answers 400 or “Client not found”
iyedy's sign-in did not recognise Codex. Check that the address is exactly https://app.iyedy.com/mcp and that you did not give Codex a client ID of your own. Remove iyedy from Codex, then add it again with the command of step 1.
The browser does not open, or the sign-in never reaches Codex
The sign-in comes back to Codex on this computer. Run the command on the computer where your browser runs, not over a remote shell, then sign in again with the login command above.
“This organization does not allow Codex as an MCP client.”
Your iyedy organisation has not added Codex to its list of allowed clients. An owner asks support to add Codex. Your personal workspace still works.
More symptoms: Coding assistant troubleshooting.
Was this page helpful?Your answer is anonymous and counts only if you accepted measurement.
What went wrong?
Don't write personal data.