mcpware/cross-code-organizer

npx @mcpware/cross-code-organizer  (first run auto-installs a /cco skill for Claude Code)
npm i -g @mcpware/cross-code-organizer

Usage

• •Run `npx @mcpware/cross-code-organizer` and switch harnesses (Claude Code / Codex CLI) from the sidebar
• •Click ✦ Show Effective per project to see what Claude Code actually loads (shadowed/conflict-tagged items)
• •Run the MCP Security Scanner to detect tool-poisoning/prompt-injection patterns; click a finding to jump to the server entry to delete/move it
• •Distill bloated sessions from the CLI: `npx @mcpware/cross-code-organizer --distill <session.jsonl>` (also `node src/trim-images.mjs <session.jsonl>`)

Key features

• ✓Cross-harness: Claude Code (~/.claude/) and Codex CLI (~/.codex/, AGENTS files, profiles, sessions, shell snapshots)
• ✓Context Budget: per-item token counts of what Claude pre-loads (~25K tokens always loaded), with 200K/1M window toggle
• ✓MCP Security Scanner: 60 detection patterns from 36 scanners, 9 deobfuscation techniques, SHA256 baselines with NEW/CHANGED/UNREACHABLE badges
• ✓MCP Controls: disable/enable MCP servers per-project, persisted to ~/.claude.json
• ✓Session Distiller + Image Trimmer: strip bloated sessions to ~10% size with zero conversation loss; Backup Center (systemd/launchd scheduled)

Best for

Developers who want to audit and clean up their AI coding tool config (duplicate MCP servers, wasted context tokens, poisoned MCP tools) across Claude Code and Codex CLI.

Caveats

• ⚠Windows 11 support is partial — dashboard works but the backup scheduler does not (Linux uses systemd, macOS launchd)
• ⚠Headless CLI/JSON mode (`cco scan --json`) is on the roadmap, not yet available; currently an interactive browser dashboard
• ⚠Reads your local harness config files (~/.claude/, ~/.codex/) and project-level config; zero telemetry but does check the npm registry for version updates
• ⚠Cursor, Windsurf, and Aider harness support are planned, not yet available