Codex CLI
Use an environment-backed bearer token so the token does not live in the config file.
export MYLAW_MY_MCP_TOKEN=mylaw_my_REPLACE_WITH_YOUR_TOKEN
codex mcp add mylaw-my --url https://mylaw.my/api/mcp --bearer-token-env-var MYLAW_MY_MCP_TOKEN