Codex CLI
Use an environment-backed bearer token so the token does not live in the config file.
export LAWS_SG_MCP_TOKEN=laws_sg_REPLACE_WITH_YOUR_TOKEN
codex mcp add laws-sg --url https://sg-arturio.cancode.codes/api/mcp --bearer-token-env-var LAWS_SG_MCP_TOKEN