Almanax Security for Claude Code and Codex

Use Almanax with Claude Code or Codex through the hosted MCP server at https://mcp.almanax.ai.

Claude Code

Set your Almanax API key before starting Claude Code:

export ALMANAX_API_KEY="your_api_key_here"

Then install the marketplace and plugin:

claude plugin marketplace add almanax-ai/almanax-security-plugin
claude plugin install almanax-security@almanax

Restart Claude Code after installation.

Before running your first scan, make sure the repository is available in Almanax. If needed, connect GitHub and link the repository in Almanax first.

Then try:

• /almanax-security:setup
• /almanax-security:scan-commit

Codex

Codex uses MCP configuration plus skills.

Set your Almanax API key:

export ALMANAX_API_KEY="your_api_key_here"

Connect the hosted Almanax MCP server:

codex mcp add --url https://mcp.almanax.ai --bearer-token-env-var ALMANAX_API_KEY almanax
codex mcp list

Then install one or both skills:

$skill-installer install https://github.com/almanax-ai/almanax-security-plugin/tree/main/.agents/skills/almanax-setup
$skill-installer install https://github.com/almanax-ai/almanax-security-plugin/tree/main/.agents/skills/almanax-scan-commit

If you prefer file-based Codex configuration, merge the example in .agents/skills/almanax-setup/codex-config.example.toml into either ~/.codex/config.toml or a project-scoped .codex/config.toml.

Before running your first scan, make sure the repository is available in Almanax. If needed, connect GitHub and link the repository in Almanax first.

After setup, try prompts like:

• Use Almanax to get my recent security findings
• Scan the current commit with Almanax and summarize the findings

Getting an API Key

1. Sign in to https://app.almanax.ai.
2. Open your organization settings.
3. Go to Account and create an API key in API keys.

Privacy and Terms

Using the hosted Almanax MCP server sends the information needed to fulfill your request to Almanax, which can include repository identifiers and commit diffs for scan workflows.

• Privacy: https://www.almanax.ai/privacy
• Terms: https://www.almanax.ai/terms

Troubleshooting

• If authentication fails, verify that ALMANAX_API_KEY is set in the shell that launched Claude Code or Codex.
• If a scan says the repository is unavailable, connect GitHub or link the repository in Almanax first.

For general product and integration documentation, see https://docs.almanax.ai.