by Waishnav
Turn ChatGPT into Codex! OR Turn Claude Web into Claude Code!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
# Add to your Claude Code skills
git clone https://github.com/Waishnav/devspaceGuides for using ai agents skills like devspace.
Last scanned: 7/22/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@anthropic-ai/claude-agent-sdk: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@earendil-works/pi-agent-core: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@earendil-works/pi-ai: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@earendil-works/pi-coding-agent: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@google/genai: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@hono/node-server: Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/ext-apps: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "body-parser: body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement",
"severity": "low"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to host confusion via failed IDN canonicalization",
"severity": "high"
},
{
"type": "npm-audit",
"message": "hono: Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "protobufjs: protobufjs: Denial of Service via infinite loop in .proto option parsing",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-07-22T06:26:56.434Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}Give ChatGPT a secure connection to your own machine and Turn ChatGPT into Codex
DevSpace is a self-hosted MCP server that lets ChatGPT read, edit, search, and run code in your real local projects — your files, your tools, your terminal — without uploading anything to a third party. You run it on your machine, expose it through a tunnel you control, and approve the connection with a password only you have.
DevSpace requires Node >=22.19 <27.
Install the DevSpace CLI:
npm install -g @waishnav/devspace
Then initialize and start the server:
devspace init
devspace serve
Or run it without a global install:
npx @waishnav/devspace init
npx @waishnav/devspace serve
During setup, DevSpace asks for:
7676Use the public origin without /mcp during setup:
https://your-tunnel-host.example.com
You will configure your MCP client with the public /mcp URL after setup.
When the client connects, DevSpace opens an Owner password approval page. Enter
the Owner password printed by devspace init. It is also stored in:
~/.devspace/auth.json
Keep that password private.
The default local endpoint is:
http://127.0.0.1:7676/mcp
Most users should connect through a public HTTPS tunnel:
https://your-tunnel-host.example.com/mcp
[!NOTE] Using DevSpace as an MCP connector isn't against OpenAI's Usage Policies — it's a standard custom App/connector setup, and writing or running code isn't a restricted use case. But your account is governed by your usage, not by DevSpace. Don't point it at anything that would violate your provider's terms. Used normally, you're fine. (Based on OpenAI's Usage Policies and Service Terms as of June 2026.)
Once connected, ChatGPT can open one of your approved project folders as a workspace. From there, it can inspect the repo, make scoped edits, run commands, and show you what changed.
DevSpace gives ChatGPT tools to:
AGENTS.md and CLAUDE.mdDevSpace is remote access to selected local folders.
You decide which roots are allowed. The MCP client still has powerful local capabilities inside an opened workspace, including shell execution. Treat a connected client like a trusted coding partner with access to your machine.
For a normal ChatGPT coding session:
devspace serve./mcp URL.DevSpace supports Linux, macOS, and Windows environments with a Bash-compatible shell.
| Platform | Status | Notes |
|---|---|---|
| Linux | Supported | Requires Node, npm, Git, and Bash. |
| macOS | Supported | Requires Node, npm, Git, and Bash. |
| Windows with Git Bash, WSL, MSYS2, or Cygwin Bash | Supported | Git Bash is the simplest native Windows setup. |
Windows PowerShell or cmd.exe only |
Not supported yet | Install Git Bash or use WSL. |
Run this to inspect your local setup:
devspace doctor
Every piece of software is becoming conversational. Natural language is redefining how we interact with tools, workflows, and systems.
My bet is that ChatGPT becomes the operating system for everything. Once we reach AGI, we will simply talk to ChatGPT, and it will prompt, coordinate, and orchestrate sub-agents that set up the right loops for us.
We are not there yet.
DevSpace is one attempt to fast-forward that future: a way for MCP-capable hosts like ChatGPT and Claude to work directly with local project files through explicit, inspectable tools.
I'm Waishnav, I like building opinionated products and tools, and DevSpace is one example of that. This year, I started my journey to build a single-person and multiple-agents company doing multiple millions in revenue. If you want to watch the failures, wins, lessons, and everything in between, come hang out with me on X.
For working on DevSpace itself:
npm install --include=dev
npm run dev
npm run typecheck
npm test
npm run build
npm run start
devspace is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by Waishnav. Turn ChatGPT into Codex! OR Turn Claude Web into Claude Code!. It has 3,303 GitHub stars.
devspace returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/Waishnav/devspace" and add it to your Claude Code skills directory (see the Installation section above).
devspace is primarily written in TypeScript. It is open-source under Waishnav on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh devspace against similar tools.
No comments yet. Be the first to share your thoughts!