Pick one dealership
The dashboard’s selected dealership is permanently encoded into the new credential.
Codex car dealership MCP
Use the same project or global MCP configuration across Codex CLI, the IDE extension, and the desktop app—without placing an AutoFire credential in your repository.
[mcp_servers.autofire]
url = "https://mcp.goautofire.com/mcp"
bearer_token_env_var = "AUTOFIRE_MCP_TOKEN"
required = true
enabled_tools = ["search_inventory", "get_vehicle"]
default_tools_approval_mode = "prompt"
tool_timeout_sec = 30The dashboard’s selected dealership is permanently encoded into the new credential.
Start with inventory only unless the Codex task genuinely needs operational workflow data.
A 30-day key is the safest default for a workstation or project with active development.
AUTOFIRE_MCP_TOKEN.~/.codex/config.toml or a trusted project’s .codex/config.toml./mcp or codex mcp list to verify the connection.config.toml, commit it, or pass it in a prompt. Codex’s bearer_token_env_var setting reads the value from the environment at runtime.The advertised list changes with the key’s scopes. An inventory-only key should not expose lead or test-drive tools.
“Use AutoFire to list five available vehicles. Include year, make, model, mileage, and price.”
“Search another dealership’s inventory.” The tool has no dealership parameter and cannot perform this request.
“Show the email for the newest lead.” Without leads:pii, get_lead is not advertised.
Ask for a random vehicle UUID. The result should be not found, never a record from another dealer.
enabled_tools or disabled_tools filters.Start with a 30-day, read-only key and only the scopes your client needs.