OpenAI Launches Codex Plugin Marketplace v0.117.0 — Skills, MCP Servers, and App Integrations in One-Click Bundles, Catching Up to Claude Code

OpenAI announced on March 27, 2026 that Codex — its agentic coding assistant — now supports plugins through a new marketplace in version 0.117.0. The feature represents OpenAI's most significant attempt to match and exceed the extensibility of competing AI coding agents, particularly Anthropic's Claude Code.

WHAT ARE CODEX PLUGINS: Plugins are installable bundles that package three components:

1. Skills — prompts that describe workflows to Codex (e.g., code review procedures, deployment checklists)
2. App Integrations — connections to external services (GitHub, Gmail, Box, Cloudflare, Figma, Linear, Notion, Sentry, Slack, Hugging Face, Vercel)
3. MCP Server Configurations — Model Context Protocol servers that give Codex access to external tools and data sources

The idea is one-click configuration: power users could already set up custom instructions, MCP servers, and integrations manually, but plugins make this reproducible across teams.

PLUGIN MARKETPLACE: A new Plugins section in the Codex app provides a searchable library of 15+ pre-built integrations. OpenAI says third-party developers can add more plugins over time. The marketplace closely mirrors Claude Code's existing skill/integration library.

PLUGIN CREATOR: A built-in @plugin-creator skill scaffolds new plugins locally, generating the required .codex-plugin/plugin.json manifest along with optional directories for skills, app connectors, and MCP configurations. This lets teams build internal plugins and test them before distributing across projects.

TECHNICAL DETAILS:

• Codex CLI 0.117.0 changelog describes plugins as a "first-class workflow"
• Remote sync for plugin install state across team members
• Plugin suggestion allowlist for organizations
• Improved plugin menu with installation status sorting

BEYOND CODING: Notably, several plugins are indirectly related to coding tasks. OpenAI is positioning Codex beyond pure software development into broader knowledge work — managing email, project management, design files, and cloud infrastructure through the same agentic interface.

As Ars Technica noted: "This is a game of catch-up; Claude Code already introduced this feature earlier this year, and it has found widespread use. If you talk to developers, you'll find a lot more Claude Code users than Codex users." The article adds this is one of OpenAI's first major steps toward broader knowledge-work functionality through its coding agent.

COMPETITIVE CONTEXT: The release arrives in a week where all three major AI coding agents now bundle MCP servers, skills, and app integrations into installable packages:

• Claude Code: First mover with skill/integration marketplace
• OpenAI Codex: Now matching with plugin marketplace
• Google Gemini CLI: Similar MCP and skill support

The convergence around MCP as the standard interoperability protocol for AI coding agents is notable — all three competitors have adopted it as the connection layer between agents and external tools.

SECURITY IMPLICATIONS: The plugin ecosystem introduces supply chain risks similar to those seen in ClawHub — malicious plugins could inject prompt payloads, exfiltrate data through MCP servers, or compromise developer workflows. OpenAI's Safety Bug Bounty program (launched March 26) specifically covers MCP abuse, suggesting the company is aware of these risks.