Under the hood: each call creates a temp workdir, writes AGENTS.md with the agent persona, and runs codex exec --profile <agent-profile> "<task>". For isolation, run in the temp dir (set mirror_repo=true) or point Codex at a worktree; profiles keep state separate.
Repo + docs: https://github.com/leonardsellem/codex-subagents-mcp?utm_sou...
I’d love feedback on safety/ops trade‑offs (e.g., sandbox modes, approvals) and which personas you’d add first (review, debugger, security, perf?).
Non‑goals: not a general‑purpose orchestrator—just a minimal, auditable bridge for Codex CLI.
If it’s useful, issues/PRs and agent recipe contributions are welcome.