Connect your agent

Check your dependencies when Codex starts.

Three steps, about a minute. No account, no key: the agent sends package names, never versions, and compares the answer with your lockfile.

01
Add the MCP server
Add this to ~/.codex/config.toml. The Codex CLI, the IDE extension and the ChatGPT desktop app share it.
~/.codex/config.toml
```
[mcp_servers.patchwire]
url = "https://patchwire.monowire.dev/mcp"
```

02

Add one line to AGENTS.md

At the root of your repository. Codex reads AGENTS.md once, when a session starts.

AGENTS.md

At the start of each session, and before you install, upgrade or deploy: call Patchwire get_advisories with the dependency names from package.json, compare the returned ranges with the lockfile, and use latest_safe to pick a fixed version for anything affected.

03
Start Codex in the project
Run codex from the repository. With the line in its instructions, Codex checks the packages in package.json against Patchwire before it changes anything.

Claude Code. Set up in a minute.

One command adds the server, then a SessionStart hook: in every new session, Claude checks before it answers.

Open the Claude Code setup

Set up? Now watch your stacks.

The dashboard shows every alert on the stacks you follow, read every hour from the source.

Open the dashboard