axonflow
v1.9.0Policy enforcement, PII detection, and audit trails for OpenAI Codex. Hybrid governance — enforces policies on terminal commands (exec_command) via hooks, provides advisory governance for other tools via implicit-activation skills, and records compliance-grade audit trails. Self-hosted via Docker — all data stays on your infrastructure.
By AxonFlowLicense: MIT1.1k GitHub starsUpdated 12 hours ago
Directory evidence
- Runtimes
- Codex
- Parsed components
- 14 skill or MCP entries
- Source updated
- Sep 23, 2026
- Manifest status
- Canonical path parsed
The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →
Install axonflow for Codex
codex plugin marketplace add hashgraph-online/awesome-codex-plugins
codex plugin marketplace upgrade awesome-codex-plugins
codex plugin add axonflow@awesome-codex-pluginsPaste and run these commands in a terminal with Codex. They add and refresh the awesome-codex-plugins catalog, then install this plugin.
Compatibility: the page URL and API slug “axonflow-2” remain stable.
- Codex:
axonflow-2@agent-plugin-marketplace→axonflow@awesome-codex-plugins
The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.
Get the source manually
git clone https://github.com/hashgraph-online/awesome-codex-pluginsClone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/getaxonflow/axonflow-codex-plugin/.
Plugin files
├── .codex-plugin/plugin.json├── skills/audit-search/SKILL.md├── skills/create-override/SKILL.md├── skills/explain-decision/SKILL.md├── skills/governance-status/SKILL.md├── skills/list-overrides/SKILL.md├── skills/list-recent-decisions/SKILL.md├── skills/pii-scan/SKILL.md├── skills/policy-list/SKILL.md├── skills/post-execute-audit/SKILL.md├── skills/pre-execute-check/SKILL.md├── skills/pro-tier-status/SKILL.md├── skills/recover-credentials/SKILL.md├── skills/revoke-override/SKILL.md└── .mcp.json
Included Skills13
Search AxonFlow audit trail for recent tool executions, policy decisions, and compliance evidence
Create a governed session override for a policy that would otherwise deny — mandatory justification, server-clamped TTL, blocked for critical-risk policies
Fetch the full reasoning behind an AxonFlow policy decision — matched policies, risk level, override availability, recent hit count
Check active governance policies and recent activity summary
List active session overrides scoped to the caller's tenant — useful for auditing dangling overrides or confirming an override is in effect before retrying
Surface the user's recent AxonFlow governance decisions — answers "what just got blocked", "show me my recent denials", or feeds a decision-history forensic flow
Scan content for PII and secrets before writing files, sending messages, or including sensitive data in responses. Use before and after any operation that handles potentially sensitive content.
List all active governance policies with categories, patterns, and severity levels
Record tool execution in AxonFlow audit trail after tool calls complete. Use after any tool call for compliance evidence.
Check AxonFlow governance policy before executing commands, writing files, or modifying any state. Also scan file content for PII before writing. Use before any tool call that creates, modifies, or deletes data.
Report the user's current AxonFlow tier (Free or Pro), Pro license expiry date, endpoint, and whether a license token is configured. Use when the user asks "am I on Pro?", "what tier am I on?", "when does my Pro license expire?", "is my license active?", or wants to know which AxonFlow they're talking to.
Help the user recover lost AxonFlow tenant credentials via the email magic-link flow, or apply a paid Pro-tier license token. Use when the user says they've lost their AXONFLOW_AUTH, lost their secret, can't authenticate, or has a new AXON- license token to install.
Revoke a previously-created AxonFlow session override — emits an audit event and ensures subsequent policy evaluations no longer consult it
MCP servers1
- url
- http://localhost:8080/api/v1/mcp-server
Plugin manifests1
{
"name": "axonflow",
"displayName": "AxonFlow Governance",
"description": "Policy enforcement, PII detection, and audit trails for OpenAI Codex. Hybrid governance — enforces policies on terminal commands (exec_command) via hooks, provides advisory governance for other tools via implicit-activation skills, and records compliance-grade audit trails. Self-hosted via Docker — all data stays on your infrastructure.",
"version": "1.9.0",
"author": {
"name": "AxonFlow",
"email": "[email protected]",
"url": "https://getaxonflow.com"
},
"homepage": "https://docs.getaxonflow.com/docs/integration/codex/",
"repository": "https://github.com/getaxonflow/axonflow-codex-plugin",
"keywords": [
"governance",
"security",
"pii",
"audit",
"compliance",
"policy-enforcement",
"data-protection",
"mcp"
],
"license": "MIT",
"logo": "assets/logo.png",
"skills": "./skills/",
"mcpServers": "./.mcp.json"
}For maintainers
If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.
[axonflow on Agent Plugins Marketplace](https://pluginsmp.com/plugins/axonflow-2)