agent-bridge

Let Claude steer Codex, and Codex steer Claude, in the real desktop chats you already have open.

agent-bridge is a single-file MCP server for Windows. It lets one AI coding agent list, read and message another agent's chats. It covers Codex in the ChatGPT desktop app, the Claude desktop Code tab and headless Claude Code CLI sessions. It drives the desktop apps through Windows UI Automation, filling the same composer and pressing the same buttons you would. No subprocess copy and no hidden session: the message lands in the chat you are watching, with that chat's full context.

• Claude as PI, Codex as worker. Claude reads a long-running Codex chat, steers it mid-turn, and pauses, resumes or rewrites its goal.
• Replies come back on their own. When the caller is itself a desktop chat, the answer is typed into the caller's chat when it is ready.
• It works in both directions. Register it in Codex and Codex can hand work to a Claude session.

Tools

Tool	What it does
list_projects(app)	Projects (folders) for codex, claude_code or claude_cli, most recently active first.
list_chats(app, project)	Chats in a project, newest first, with each Codex chat's goal status and each Claude chat's busy/idle state.
read_chat(app, chat, last)	The last messages of a chat: what was asked and each turn's final answer.
send_message(app, text, chat?, project?)	Types into an existing chat, or starts a new one in any folder. A busy Codex chat gets the message as a Steer. Returns a job_id.
wait_reply(job_id)	Waits for the answer to a send.
codex_goal(chat, action, objective?)	Gets, pauses, resumes or edits a Codex chat's goal, and checks the change against Codex's goal store.
codex_generate_image(prompt, dest_dir)	Has Codex make an image with its image_gen tool and copies the file to you.

Install

Requires Windows, Python 3.11+, and the Codex (ChatGPT) and/or Claude desktop apps installed and signed in.

Claude Code

claude mcp add -s user agent-bridge -- uvx agent-bridge-mcp

Codex (~/.codex/config.toml). Replies can take a while, so raise the tool timeout:

[mcp_servers.agent_bridge]
command = "uvx"
args = ["agent-bridge-mcp"]
tool_timeout_sec = 1800

Any other MCP client

{ "mcpServers": { "agent-bridge": { "command": "uvx", "args": ["agent-bridge-mcp"] } } }

Without uv: pip install agent-bridge-mcp, then use agent-bridge-mcp as the command. From source: uvx --from git+https://github.com/EngMarchG/agent-bridge agent-bridge-mcp.

Example

Read my Codex chat "Implement milestones" in project bridges, tell me where it is stuck, and steer it toward the failing test.

The calling agent runs list_chats, read_chat and then send_message. The answer arrives in its chat when Codex finishes the turn.

How it works

• Listing and reading opens each app's own local files read-only: Codex's SQLite state and rollouts, and Claude's session JSON and JSONL transcripts.
• Sending goes through UI Automation. The bridge first switches the ChatGPT app to Codex mode, then opens the chat from the sidebar. It handles a split Claude window. A busy Codex chat shows Queue and then Steer, and the bridge clicks Steer. Afterwards it puts back the chats you were looking at.
• Replies. Every send starts a detached watcher. The watcher waits for the turn to end in the transcript and stores the reply in ~/.agent-bridge/jobs/ (set AGENT_BRIDGE_HOME to move it). If the caller is a desktop chat, the watcher types the reply into it.
• claude_cli runs claude -p --resume headless with the permission_mode you pass.

Limits and safety

• Windows only. It depends on UI Automation, and on the apps' current labels and layout, so an app update can break it.
• It types into your real chats and briefly brings the app window forward. Don't type in the target window during a send.
• Run one call at a time. Parallel calls drive the same UI and collide. A file lock serialises calls across processes.
• Wake the window if needed. If a send fails with "no window found", the Chromium window has its accessibility tree off. Click into the app once.
• The bridge never accepts "Trust this workspace?" for you. It never overwrites a draft that's already in the composer.
• Prompt injection. Text in one agent's reply becomes input for another. Treat chains of agents with the same care as any other untrusted input.

Development

python test_agent_bridge.py

The test checks transcript parsing only and touches no app.

License

MIT