Codex rust-v0.151.0 Lets Extensions Inspect or Replace MCP Tool Results Before the Model Sees Them
Published 2026-08-29 at 09:55 UTC, Codex rust-v0.151.0 adds an extension point where MCP tool results can be inspected or replaced before reaching the model (#41202), a configurable grace period for discovering tools from optional MCP servers (#41199), and plugin catalogs that combine per-repository configuration while reporting invalid project marketplaces without hiding valid plugins (#41208). The result-interception hook is the notable one: it is a place to redact secrets or strip injected instructions out of untrusted MCP output before it enters context. Fixes include counting nested subagent token usage toward root goal budgets (#41183) and preventing stale Guardian classifications from authorizing actions after permission state changes (#41196).
Source
↳ Follow the thread