The complete Codex CLI reference.

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Connect the TUI to a remote app server endpoint. Accepted forms: `ws://host:port`, `wss://host:port`, `unix://`, or `unix://PATH`.

Name of the environment variable containing the bearer token to send to a remote app server websocket

Error out when config.toml contains fields that are not recognized by this version of Codex

Optional image(s) to attach to the initial prompt

Model the agent should use

Use open-source provider

Specify which local provider to use (lmstudio or ollama). If not specified with --oss, will use config default or show selection

Select a named configuration profile from $CODEX_HOME; -p is profile selection, not non-interactive mode.

Select the sandbox policy to use when executing model-generated shell commands [possible values: read-only, workspace-write, danger-full-access]

Route approval requests through automatic review using the workspace-write sandbox

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Tell the agent to use the specified directory as its working root

Run the session in a new managed Git worktree

Additional directories that should be writable alongside the primary workspace

Configure when the model requires human approval before executing a command Possible values: - on-request: The model decides when to ask the user for approval - never: Never ask for user approval Execution failures are immediately returned to the model

Enable live web search. When enabled, the native Responses `web_search` tool is available to the model (no per‑call approval)

Disable alternate screen mode Runs the TUI in inline mode, preserving terminal scrollback history.

Run without the shared background server, even if it is already running

Print help (see a summary with '-h')

Print version

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Connect the TUI to a remote app server endpoint. Accepted forms: `ws://host:port`, `wss://host:port`, `unix://`, or `unix://PATH`.

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Name of the environment variable containing the bearer token to send to a remote app server websocket

Use this directory for new tasks on a remote server

Disable alternate screen mode

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Error out when config.toml contains fields that are not recognized by this version of Codex

Optional image(s) to attach to the initial prompt

Model the agent should use

Use open-source provider

Specify which local provider to use (lmstudio or ollama). If not specified with --oss, will use config default or show selection

Select a named configuration profile from $CODEX_HOME; -p is profile selection, not non-interactive mode.

Select the sandbox policy to use when executing model-generated shell commands [possible values: read-only, workspace-write, danger-full-access]

Route approval requests through automatic review using the workspace-write sandbox

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Tell the agent to use the specified directory as its working root

Run the session in a new managed Git worktree

Additional directories that should be writable alongside the primary workspace

Source classification for newly created or forked threads

Request an experimental Cyber access program for this turn (OpenAI provider only). Omit to use server defaults. Not supported with review; fork requires a prompt [possible values: standard, daybreak_blue, daybreak_red]

Allow running Codex outside a Git repository

Run without persisting session files to disk

Do not load `$CODEX_HOME/config.toml`; auth still uses `CODEX_HOME`

Do not load user or project execpolicy `.rules` files

Path to a JSON Schema file describing the model's final response shape

Specifies color settings for use in the output [default: auto] [possible values: always, never, auto]

Print events to stdout as JSONL

Specifies file where the last message from the agent should be written

Print help (see a summary with '-h')

Print version

Removed: no longer supported. Use --sandbox workspace-write, or --approve-for-me to route approvals through automatic review.

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Error out when config.toml contains fields that are not recognized by this version of Codex

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Review staged, unstaged, and untracked changes

Review changes against the given base branch

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Review the changes introduced by a commit

Optional commit title to display in the review summary

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Read the API key from stdin (e.g. `printenv OPENAI_API_KEY | codex login --with-api-key`)

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Read the access token from stdin (e.g. `printenv CODEX_ACCESS_TOKEN | codex login

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Show or set device auth.

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Connect to a remote code-mode host instead of starting a local host

Error out when config.toml contains fields that are not recognized by this version of Codex

Transport endpoint URL. Supported values: `stdio://` (default), `unix://`, `unix://PATH`, `ws://IP:PORT`, `off` [default: stdio://]

Use stdio as the transport (equivalent to `--listen stdio://`)

Controls whether analytics are enabled by default. Analytics are disabled by default for app-server. Users have to explicitly opt in via the `analytics` section in the config.toml file. However, for first-party use cases like the VSCode IDE extension, we default analytics to be enabled by default by setting this flag. Users can still opt out by setting this in their config.toml: ```toml [analytics] enabled = false ``` See https://developers.openai.com/codex/config-advanced/#metrics for more details.

Authentication mode for incoming WebSocket connections [possible values: capability-token, signed-bearer-token]

Absolute path to the capability-token file

Hex-encoded SHA-256 digest of the capability token

Absolute path to the shared secret file for signed JWT bearer tokens

Expected issuer for signed JWT bearer tokens

Expected audience for signed JWT bearer tokens

Maximum clock skew when validating signed JWT bearer tokens

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Emit machine-readable JSON

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Run an embedded app-server in the foreground until Ctrl-C

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Override the app installer download URL (advanced)

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Emit a redacted machine-readable report

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Only show grouped check rows and the final count summary

Expand long lists in detailed human output

Disable ANSI color in human output

Use ASCII status labels and separators in human output

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Opaque JSON value from `codex/sandbox-state` to apply directly

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Add a readable root to the supplied sandbox state. Repeat for multiple roots

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Disable direct network access in the supplied sandbox state

Named permissions profile to apply from the active configuration stack

Select a named configuration profile from $CODEX_HOME; -p is profile selection, not non-interactive mode.

Working directory used for profile resolution and command execution

Include managed requirements while resolving an explicit permissions profile

Allow the sandboxed command to bind/connect AF_UNIX sockets rooted at this path. Relative paths are resolved against the current directory. Repeat to allow multiple paths

While the command runs, capture macOS sandbox denials via `log stream` and print them after exit

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Continue the most recent session without showing the picker

Show all sessions (disables cwd filtering and shows CWD column)

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Include non-interactive sessions in the resume picker and --last selection

Connect the TUI to a remote app server endpoint. Accepted forms: `ws://host:port`, `wss://host:port`, `unix://`, or `unix://PATH`.

Name of the environment variable containing the bearer token to send to a remote app server websocket

Error out when config.toml contains fields that are not recognized by this version of Codex

Optional image(s) to attach to the initial prompt

Model the agent should use

Use open-source provider

Specify which local provider to use (lmstudio or ollama). If not specified with --oss, will use config default or show selection

Select a named configuration profile from $CODEX_HOME; -p is profile selection, not non-interactive mode.

Select the sandbox policy to use when executing model-generated shell commands [possible values: read-only, workspace-write, danger-full-access]

Route approval requests through automatic review using the workspace-write sandbox

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Tell the agent to use the specified directory as its working root

Run the session in a new managed Git worktree

Additional directories that should be writable alongside the primary workspace

Configure when the model requires human approval before executing a command Possible values: - on-request: The model decides when to ask the user for approval - never: Never ask for user approval Execution failures are immediately returned to the model

Enable live web search. When enabled, the native Responses `web_search` tool is available to the model (no per‑call approval)

Disable alternate screen mode Runs the TUI in inline mode, preserving terminal scrollback history.

Run without the shared background server, even if it is already running

Print help (see a summary with '-h')

Print version

Session UUID or exact session name

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Message text to queue

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Connect the TUI to a remote app server endpoint. Accepted forms: `ws://host:port`, `wss://host:port`, `unix://`, or `unix://PATH`.

Name of the environment variable containing the bearer token to send to a remote app server websocket

Optional image(s) to attach to the initial prompt

Model the agent should use

Use open-source provider

Specify which local provider to use (lmstudio or ollama). If not specified with --oss, will use config default or show selection

Select a named configuration profile from $CODEX_HOME; -p is profile selection, not non-interactive mode.

Select the sandbox policy to use when executing model-generated shell commands [possible values: read-only, workspace-write, danger-full-access]

Route approval requests through automatic review using the workspace-write sandbox

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Tell the agent to use the specified directory as its working root

Run the session in a new managed Git worktree

Additional directories that should be writable alongside the primary workspace

Error out when config.toml contains fields that are not recognized by this version of Codex

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Print help (see a summary with '-h')

Connect the TUI to a remote app server endpoint. Accepted forms: `ws://host:port`, `wss://host:port`, `unix://`, or `unix://PATH`.

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Name of the environment variable containing the bearer token to send to a remote app server websocket

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Optional image(s) to attach to the initial prompt

Model the agent should use

Use open-source provider

Specify which local provider to use (lmstudio or ollama). If not specified with --oss, will use config default or show selection

Select a named configuration profile from $CODEX_HOME; -p is profile selection, not non-interactive mode.

Select the sandbox policy to use when executing model-generated shell commands [possible values: read-only, workspace-write, danger-full-access]

Route approval requests through automatic review using the workspace-write sandbox

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Tell the agent to use the specified directory as its working root

Run the session in a new managed Git worktree

Additional directories that should be writable alongside the primary workspace

Error out when config.toml contains fields that are not recognized by this version of Codex

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Print help (see a summary with '-h')

Connect the TUI to a remote app server endpoint. Accepted forms: `ws://host:port`, `wss://host:port`, `unix://`, or `unix://PATH`.

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Name of the environment variable containing the bearer token to send to a remote app server websocket

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Optional image(s) to attach to the initial prompt

Model the agent should use

Use open-source provider

Specify which local provider to use (lmstudio or ollama). If not specified with --oss, will use config default or show selection

Select a named configuration profile from $CODEX_HOME; -p is profile selection, not non-interactive mode.

Select the sandbox policy to use when executing model-generated shell commands [possible values: read-only, workspace-write, danger-full-access]

Route approval requests through automatic review using the workspace-write sandbox

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Tell the agent to use the specified directory as its working root

Run the session in a new managed Git worktree

Additional directories that should be writable alongside the primary workspace

Error out when config.toml contains fields that are not recognized by this version of Codex

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Delete without prompting. SESSION must be a UUID

Print help (see a summary with '-h')

Publish the migration. Without this flag the command only reports eligible sessions

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Restrict inspection or migration to one or more thread IDs

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Limit aggregate rollout read and write throughput, in MiB per second

Emit the complete per-thread report as JSON

Print one line for every inspected rollout

Print help (see a summary with '-h')

Connect the TUI to a remote app server endpoint. Accepted forms: `ws://host:port`, `wss://host:port`, `unix://`, or `unix://PATH`.

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Name of the environment variable containing the bearer token to send to a remote app server websocket

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Optional image(s) to attach to the initial prompt

Model the agent should use

Use open-source provider

Specify which local provider to use (lmstudio or ollama). If not specified with --oss, will use config default or show selection

Select a named configuration profile from $CODEX_HOME; -p is profile selection, not non-interactive mode.

Select the sandbox policy to use when executing model-generated shell commands [possible values: read-only, workspace-write, danger-full-access]

Route approval requests through automatic review using the workspace-write sandbox

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Tell the agent to use the specified directory as its working root

Run the session in a new managed Git worktree

Additional directories that should be writable alongside the primary workspace

Error out when config.toml contains fields that are not recognized by this version of Codex

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Fork the most recent session without showing the picker

Show all sessions (disables cwd filtering and shows CWD column)

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Connect the TUI to a remote app server endpoint. Accepted forms: `ws://host:port`, `wss://host:port`, `unix://`, or `unix://PATH`.

Name of the environment variable containing the bearer token to send to a remote app server websocket

Error out when config.toml contains fields that are not recognized by this version of Codex

Optional image(s) to attach to the initial prompt

Model the agent should use

Use open-source provider

Specify which local provider to use (lmstudio or ollama). If not specified with --oss, will use config default or show selection

Select a named configuration profile from $CODEX_HOME; -p is profile selection, not non-interactive mode.

Select the sandbox policy to use when executing model-generated shell commands [possible values: read-only, workspace-write, danger-full-access]

Route approval requests through automatic review using the workspace-write sandbox

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Tell the agent to use the specified directory as its working root

Run the session in a new managed Git worktree

Additional directories that should be writable alongside the primary workspace

Configure when the model requires human approval before executing a command Possible values: - on-request: The model decides when to ask the user for approval - never: Never ask for user approval Execution failures are immediately returned to the model

Enable live web search. When enabled, the native Responses `web_search` tool is available to the model (no per‑call approval)

Disable alternate screen mode Runs the TUI in inline mode, preserving terminal scrollback history.

Run without the shared background server, even if it is already running

Print help (see a summary with '-h')

Print version

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Print version

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Error out when config.toml contains fields that are not recognized by this version of Codex

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Linux PID namespace: isolate (default) or inherit. Inherit allows signals to other same-UID processes; enable only when provisioning a dedicated environment [default: isolate]

Allow permitted private IP destinations to use the configured upstream proxy. If no valid upstream proxy applies to the request protocol, connect directly. Loopback stays local. This flag does not require upstream routing [env: CODEX_EXEC_SERVER_PROXY_PRIVATE_IPS_VIA_UPSTREAM=]

Maximum number of requests to process concurrently on each connection [default: 1]

Transport endpoint URL. Supported values: `ws://IP:PORT` (default), `stdio`, `stdio://`

Authentication mode for incoming WebSocket connections [possible values: capability-token, signed-bearer-token]

Absolute path to the capability-token file

Hex-encoded SHA-256 digest of the capability token

Absolute path to the shared secret file for signed JWT bearer tokens

Expected issuer for signed JWT bearer tokens

Expected audience for signed JWT bearer tokens

Maximum clock skew when validating signed JWT bearer tokens

Register this exec-server as a remote environment using the given base URL

Transport used for the remote executor connection [default: noise] [possible values: noise, direct]

Environment id to attach to when registering remotely

Human-readable environment name

Use Agent Identity auth from CODEX_ACCESS_TOKEN for remote registration

Sign Direct registration and WebSocket handshake requests with AWS SigV4

AWS profile used for SigV4 authentication

AWS signing region. Uses the SDK region chain when omitted

AWS signing service [default: execute-api]

Exit when the parent-owned standard-input pipe closes [env: CODEX_EXEC_SERVER_EXIT_ON_STDIN_CLOSE=]

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Resume the most recent recorded session (newest) without specifying an id

Show all sessions (disables cwd filtering)

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Optional image(s) to attach to the prompt sent after resuming

Error out when config.toml contains fields that are not recognized by this version of Codex

Model the agent should use

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Run the session in a new managed Git worktree

Source classification for newly created or forked threads

Request an experimental Cyber access program for this turn (OpenAI provider only). Omit to use server defaults. Not supported with review; fork requires a prompt [possible values: standard, daybreak_blue, daybreak_red]

Allow running Codex outside a Git repository

Run without persisting session files to disk

Do not load `$CODEX_HOME/config.toml`; auth still uses `CODEX_HOME`

Do not load user or project execpolicy `.rules` files

Path to a JSON Schema file describing the model's final response shape

Print events to stdout as JSONL

Specifies file where the last message from the agent should be written

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Optional image(s) to attach to the prompt sent after forking

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Error out when config.toml contains fields that are not recognized by this version of Codex

Model the agent should use

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Run the session in a new managed Git worktree

Source classification for newly created or forked threads

Request an experimental Cyber access program for this turn (OpenAI provider only). Omit to use server defaults. Not supported with review; fork requires a prompt [possible values: standard, daybreak_blue, daybreak_red]

Allow running Codex outside a Git repository

Run without persisting session files to disk

Do not load `$CODEX_HOME/config.toml`; auth still uses `CODEX_HOME`

Do not load user or project execpolicy `.rules` files

Path to a JSON Schema file describing the model's final response shape

Print events to stdout as JSONL

Specifies file where the last message from the agent should be written

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Review staged, unstaged, and untracked changes

Review changes against the given base branch

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Review the changes introduced by a commit

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Error out when config.toml contains fields that are not recognized by this version of Codex

Optional commit title to display in the review summary

Model the agent should use

Skip all confirmation prompts and execute commands without sandboxing. EXTREMELY DANGEROUS. Intended solely for running in environments that are externally sandboxed

Run enabled hooks without requiring persisted hook trust for this invocation. DANGEROUS. Intended only for automation that already vets hook sources

Run the session in a new managed Git worktree

Source classification for newly created or forked threads

Request an experimental Cyber access program for this turn (OpenAI provider only). Omit to use server defaults. Not supported with review; fork requires a prompt [possible values: standard, daybreak_blue, daybreak_red]

Allow running Codex outside a Git repository

Run without persisting session files to disk

Do not load `$CODEX_HOME/config.toml`; auth still uses `CODEX_HOME`

Do not load user or project execpolicy `.rules` files

Path to a JSON Schema file describing the model's final response shape

Print events to stdout as JSONL

Specifies file where the last message from the agent should be written

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Output the configured servers as JSON

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Output the server configuration as JSON

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Environment variables to set when launching the server. Only valid with stdio servers

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

URL for a streamable HTTP MCP server

Optional environment variable to read for a bearer token. Only valid with streamable HTTP servers

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Optional OAuth client identifier to use for this MCP server

Optional OAuth client secret for the pre-registered client

OAuth client-registration strategy for the immediate login only [possible values: auto, cimd, dcr]

Optional OAuth resource parameter to include during MCP login

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Print the authorization URL and accept the callback URL without opening a browser

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Comma-separated list of OAuth scopes to request

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

OAuth client-registration strategy for this login only [possible values: auto, cimd, dcr]

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Marketplace name to use when PLUGIN does not include @MARKETPLACE

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Output install result as JSON

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Only list plugins from this marketplace name

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Output plugin list as JSON

Include uninstalled marketplace plugins in the JSON output

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Marketplace name to use when PLUGIN does not include @MARKETPLACE

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Output remove result as JSON

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Path to the app-server Unix domain socket to connect to

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Output directory where .ts files will be written

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Optional path to the Prettier executable to format generated files

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Include experimental methods and fields in the generated output

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Output directory where the schema bundle will be written

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Include experimental methods and fields in the generated output

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Emit machine-readable JSON

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Emit machine-readable JSON

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Emit machine-readable JSON

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h') Run as administrator after stopping apps using the legacy sandbox and its provisioning service, if installed. Preserves Codex home, including sandbox directories and filesystem permissions.

Skip refresh and dump only the bundled catalog shipped with this binary

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Optional image(s) to attach to the user prompt

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Target environment identifier (see `codex cloud` to browse)

Number of assistant attempts (best-of-N) [default: 1]

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Git branch to run in Codex Cloud (defaults to current branch)

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Filter tasks by environment identifier

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Maximum number of tasks to return (1-20) [default: 20]

Pagination cursor returned by a previous call

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Emit JSON instead of plain text

Print help (see a summary with '-h')

Attempt number to apply (1-based)

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Attempt number to display (1-based)

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Destination exec-server WebSocket URL

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Error out when config.toml contains fields that are not recognized by this version of Codex

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Linux PID namespace: isolate (default) or inherit. Inherit allows signals to other same-UID processes; enable only when provisioning a dedicated environment [default: isolate]

Allow permitted private IP destinations to use the configured upstream proxy. If no valid upstream proxy applies to the request protocol, connect directly. Loopback stays local. This flag does not require upstream routing [env: CODEX_EXEC_SERVER_PROXY_PRIVATE_IPS_VIA_UPSTREAM=]

Register this exec-server as a remote environment using the given base URL

Transport used for the remote executor connection [default: noise] [possible values: noise, direct]

Environment id to attach to when registering remotely

Human-readable environment name

Use Agent Identity auth from CODEX_ACCESS_TOKEN for remote registration

Sign Direct registration and WebSocket handshake requests with AWS SigV4

AWS profile used for SigV4 authentication

AWS signing region. Uses the SDK region chain when omitted

AWS signing service [default: execute-api]

Exit when the parent-owned standard-input pipe closes [env: CODEX_EXEC_SERVER_EXIT_ON_STDIN_CLOSE=]

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Git ref to fetch for Git marketplace sources

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Sparse checkout path for Git marketplace sources. Can be repeated

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Output add result as JSON

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Output marketplace list as JSON

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Output upgrade result as JSON

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Output remove result as JSON

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h') Example: codex plugin marketplace remove debug

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Launch the managed app-server with remote control enabled

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Copy and pin this CLI package

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Confirm replacing the daemon package without an interactive prompt

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')

Override a configuration value that would otherwise be loaded from `~/.codex/config.toml`. Use a dotted path (`foo.bar.baz`) to override nested values. The `value` portion is parsed as TOML. If it fails to parse as TOML, the raw string is used as a literal. Examples: - `-c model="o3"` - `-c 'sandbox_permissions=["disk-full-read-access"]'` - `-c shell_environment_policy.inherit=all`

Enable a feature (repeatable). Equivalent to `-c features.<name>=true`

Disable a feature (repeatable). Equivalent to `-c features.<name>=false`

Print help (see a summary with '-h')