Go to file

root 99352395af Forbid local artifact generation as MCP fallback

Observed behavior: when the MCP returns Auth required, Codex fell
through to "let me generate the .pptx/.xlsx myself" — probing for
python-pptx/openpyxl/xlsxwriter and then PowerPoint/Excel COM
automation. Any artifact produced that way has fabricated SKUs,
prices, and templates — worse than no artifact.

Previous guardrails forbade reconstructing the KB locally and
inventing SKUs, but did not explicitly forbid local artifact
generation. Add that rule: if the MCP is unreachable, no artifacts
are produced, full stop.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-20 14:09:18 -03:00

.codex-plugin

Stub bundled SKILL.md; read canonical methodology from MCP resource

2026-04-20 13:38:59 -03:00

assets

Initial scaffold for OCI Deal Accelerator Codex plugin

2026-04-20 11:41:25 -03:00

skills/oci-deal-accelerator

Forbid local artifact generation as MCP fallback

2026-04-20 14:09:18 -03:00

.gitignore

Stub bundled SKILL.md; read canonical methodology from MCP resource

2026-04-20 13:38:59 -03:00

.mcp.json

Initial scaffold for OCI Deal Accelerator Codex plugin

2026-04-20 11:41:25 -03:00

README.md

Document MCP re-authentication commands

2026-04-20 13:57:10 -03:00

README.md

OCI Deal Accelerator — Codex Plugin

Codex plugin that connects to the OCI Deal Accelerator MCP server and bundles a companion skill. Distributed internally via ai-lad.com.

What you get

14 tools surfaced through a remote MCP server (streamable HTTP, OAuth 2.1):

generate_full_proposal, generate_bom, generate_bom_appca, generate_cost_estimate
generate_deck, generate_diagram, generate_business_case
run_wa_review, check_feature_compatibility, compare_competitive
search_reference_architectures, search_field_findings, report_field_finding
score_ecal_readiness

Plus a skill (skills/oci-deal-accelerator/SKILL.md) that guides Codex on when and how to invoke each tool.

Install

Once the plugin is registered in ai-lad.com you will get an <ID>. Replace it below.

Windows (PowerShell)

iwr -UseBasicParsing 'https://ai-lad.com/api/skills/<ID>/install-script?os=windows' | iex

macOS / Linux

curl -fsSL 'https://ai-lad.com/api/skills/<ID>/install-script?os=unix' | bash

The installer downloads the plugin ZIP, extracts it to ~/plugins/oci-deal-accelerator/, merges the ai-factory marketplace entry in ~/.agents/plugins/marketplace.json, and restarts Codex. Policy: installation: "AVAILABLE", authentication: "ON_INSTALL".

First-run authentication

On first install Codex kicks off the OAuth 2.1 + PKCE flow against the MCP server (AS proxy → OCI Identity Domain). A browser window opens; sign in with your Oracle SSO.

The MCP server implements Dynamic Client Registration (RFC 7591), so Codex's ephemeral http://localhost:<port> callback registers itself on the fly — no manual whitelisting in the AS required. Restricted to @oracle.com identities.

Re-authentication

If a tool call fails with Auth required, the OAuth access token has expired and Codex did not refresh it automatically. Re-authenticate without uninstalling:

codex mcp login oci-deal-accelerator

Opens the browser, re-authenticates with Oracle SSO, tools are available again. If that fails, force a clean slate first:

codex mcp logout oci-deal-accelerator
codex mcp login oci-deal-accelerator

As a last resort, uninstall the plugin from /plugins and reinstall — the authentication: "ON_INSTALL" policy triggers a fresh OAuth flow on install.

Repo layout

oci-deal-accelerator-codex/
├── .codex-plugin/
│   └── plugin.json          # Codex plugin manifest
├── .mcp.json                # Remote MCP server config
├── skills/
│   └── oci-deal-accelerator/
│       └── SKILL.md         # Tool-usage guidance
├── assets/                  # logo.png, icon.png, screenshot-1.png
├── README.md
└── .gitignore

References

Codex Plugins — Build
Codex MCP configuration
MCP server repo: github.com/Diegoecab/arch-mcp-oracle