Lockpick for Codex

Install the plugin, connect your Lockpick account in the plugin settings, and choose the intended workspace. Ask to show your sites and allowance before starting a check.

The plugin uses the hosted Lockpick MCP service. It returns findings, redacted proof, coverage and repair guidance. Proprietary assessment engines and internal traces are never distributed. Scan charges and permissions come from your account; Deep scans require ownership proof and explicit approval.

Disconnect in the client settings and revoke the connection in Lockpick Workspace settings. The thin plugin is MIT licensed; the hosted service has its own terms.