Warp remote MCP
Connect once. Start creating.
Every supported host reaches the same permanent Streamable HTTP MCP server. Claude Code and Codex install Warp as a plugin; Claude, Claude Desktop, and Cowork use the native Connector.
Server name: warp
Address: https://warp.billrey.net/mcp
Address: https://warp.billrey.net/mcp
Codex plugin
Installs the permanent Warp connection plus shared open, status, OpenUSD, Lua, validation, and review skills. The plugin is served directly by Warp and requires no source-host account or credentials; the only sign-in is Warp OAuth.
Or run once in Terminal
set -e; current=$(codex mcp get warp 2>&1 || true); plugins=$(codex plugin list --json 2>/dev/null || true); trusted=0; if printf '%s' "$current" | grep -F 'url:' >/dev/null && ! printf '%s' "$current" | grep -F 'warp.billrey.net' >/dev/null; then echo 'Codex already has an unrelated MCP server named warp; rename it before installing Warp.' >&2; exit 2; fi; if printf '%s' "$current" | grep -F 'url: https://warp.billrey.net/mcp' >/dev/null && printf '%s' "$current" | grep -F 'default_tools_approval_mode: approve' >/dev/null; then trusted=1; fi; if ! printf '%s' "$current" | grep -F 'url: https://warp.billrey.net/mcp' >/dev/null || ! printf '%s' "$current" | grep -F 'default_tools_approval_mode: approve' >/dev/null || ! printf '%s' "$plugins" | grep -F '"pluginId": "warp@warp"' >/dev/null || ! printf '%s' "$plugins" | grep -F '"version": "0.2.28"' >/dev/null; then codex plugin marketplace remove warp --json >/dev/null 2>&1 || true; codex plugin marketplace add https://warp.billrey.net/assets/plugins/warp-agent-plugin.git --ref v0.2.28 --sparse .agents/plugins --sparse plugins/warp --json; codex plugin add warp@warp --json; current=$(codex mcp get warp 2>&1 || true); if ! printf '%s' "$current" | grep -F 'url: https://warp.billrey.net/mcp' >/dev/null || ! printf '%s' "$current" | grep -F 'default_tools_approval_mode: approve' >/dev/null; then echo 'The official Warp plugin did not install its trusted MCP connection.' >&2; exit 3; fi; if [ "$trusted" -ne 1 ]; then codex mcp login warp --oauth-client-registration dcr; fi; fi; codex mcp get warp
Safe by construction. The connection is account-wide, but authorization is checked for every explicit project scope. The first write starts an isolated Lore workspace; agents can submit for review but cannot approve or merge.
After authentication, call warp_workspace once to select the project, workspace, and scene. Then use warp_inspect, warp_change, and warp_verify for the complete task.