From 6be6ed9c43502a8c8e36fe9fda560262cc4e65cf Mon Sep 17 00:00:00 2001
From: armorer-labs <armorer-labs@users.noreply.github.com>
Date: Tue, 19 May 2026 14:27:52 +0800
Subject: [PATCH] Document Armorer Guard MCP proxy

---
 README.md | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/README.md b/README.md
index dd4d777..3b0d03a 100644
--- a/README.md
+++ b/README.md
@@ -65,6 +65,30 @@ No installation:
 }
 ```
 
+Optional local guardrail with [Armorer Guard](https://github.com/ArmorerLabs/Armorer-Guard):
+
+```json
+{
+  "mcpServers": {
+    "codex-data": {
+      "command": "armorer-guard",
+      "args": [
+        "mcp-proxy",
+        "--",
+        "npx",
+        "-y",
+        "@codex-data/codex-mcp"
+      ],
+      "env": {
+        "CODEX_API_KEY": "<your-codex-api-key>"
+      }
+    }
+  }
+}
+```
+
+This keeps the same Codex MCP server configuration and adds a local proxy that inspects tool-call arguments for prompt injection, credential leakage, exfiltration risk, and dangerous actions before forwarding safe calls.
+
 Local installation:
 
 ```json