LoFP LoFP / engineers enable approved codex mcp connectors for github, slack, ticketing, and internal tools during normal development. validate the tool name, connector, and whether the integration matches an approved workflow.

Techniques

Sample rules

OpenAI ChatGPT Enterprise Unusual Codex MCP Tool Call

Description

Detects the first ChatGPT Enterprise Codex MCP tool name used by a given user email within an organization in the rule history window. Codex MCP tools can query external systems and pull organizational data into an agent session. Alerting on first-seen organization, user, and tool triples highlights new or unexpected connector usage rather than every routine approved tool call.

Detection logic

data_stream.dataset: "openai_chatgpt_enterprise.codex_log" and
    event.action: "app_mcp_call" and
    organization.id: * and
    user.email: * and
    gen_ai.tool.name: *