diff --git a/README.md b/README.md
index dd4d777..3b0d03a 100644
--- a/README.md
+++ b/README.md
@@ -65,6 +65,30 @@ No installation:
 }
 ```
 
+Optional local guardrail with [Armorer Guard](https://github.com/ArmorerLabs/Armorer-Guard):
+
+```json
+{
+  "mcpServers": {
+    "codex-data": {
+      "command": "armorer-guard",
+      "args": [
+        "mcp-proxy",
+        "--",
+        "npx",
+        "-y",
+        "@codex-data/codex-mcp"
+      ],
+      "env": {
+        "CODEX_API_KEY": "<your-codex-api-key>"
+      }
+    }
+  }
+}
+```
+
+This keeps the same Codex MCP server configuration and adds a local proxy that inspects tool-call arguments for prompt injection, credential leakage, exfiltration risk, and dangerous actions before forwarding safe calls.
+
 Local installation:
 
 ```json