MCP config migration

Move MCP config without turning secret references into leaked config.

The risky part of a Claude Code to Codex move is not the server list. It is the helper commands, env references, absolute paths, and local wrappers hidden inside the config.

Good migration keeps the reference shape intact. A copied literal secret, stale keychain helper, or source-only path can make the target harness look valid while breaking the first real tool call.

What to audit first

Secret referencesKeep env variables, Keychain helpers, and 1Password references as references. Never inline live credentials.
Local pathsAbsolute paths, wrapper scripts, and socket locations often point at the source harness layout.
Transport assumptionsHTTP, stdio, and local wrapper expectations can drift when the target launcher changes.
Validation notesWhen behavior is not equivalent, record it as a target-side note before the first Codex edit.

Minimum migration checklist

  1. Export the source config and classify every server by transport, wrapper, and secret reference shape.
  2. Replace source-only absolute paths with target-valid paths or a documented wrapper location.
  3. Confirm every env or keychain reference stays indirect after migration; do not copy raw values into config.
  4. Run one tool-list or dry-run call per critical server before allowing Codex to edit code.
  5. Write a target-side note for every server that still depends on a source-only hook, wrapper, or launcher.

Bring Your AI local path

Bring Your AI treats MCP config as part of the harness audit, not a blind file copy. The local CLI keeps harness files on the machine, preserves indirect secret references, and records non-equivalent behavior as validation notes.

curl -fsSL https://bringyour.ai/install.sh | sh
bringyour preview --from claude-code --to codex
bringyour migrate --from claude-code --to codex --policy merge

The remote MCP at bringyour.ai/mcp is no-data. Agents can inspect supported moves, install commands, and checkout routes without uploading harness files, rules, or secrets.

Buy lifetime access Read the audit guide
back to bringyour.ai