Glossary – Codex
Use this glossary as a quick reference for Codex terms across the app, CLI, IDE extension, cloud, SDK, and related integrations.
| Term | Definition | Applies to |
|---|---|---|
| Agent | The Codex worker that reasons over context, uses tools, and completes a task. | App, CLI, IDE extension, Cloud |
| AGENTS.md | Repository or user guidance file that gives Codex persistent instructions. | App, CLI, IDE extension, Cloud |
| Analytics dashboard | Admin view for Codex usage, adoption, and code review metrics. | Enterprise |
| API key sign-in | Authentication using an OpenAI API key. | App, CLI, IDE extension |
| Approval policy | Rules for when Codex must ask before taking an action. | App, CLI, IDE extension |
| Approval request | Codex asking to allow a restricted action. | App, CLI, IDE extension |
| Apps (connectors) | Integration that lets Codex access external services. Available through plugins; also called connectors. | App, CLI, IDE extension |
| Appshot | Snapshot of the frontmost app window sent to a Codex thread. | App |
| Auth cache | Locally stored login credentials reused by Codex. | App, CLI, IDE extension |
| Automatic approval review | Model-based review of eligible approval requests before they proceed. | App, CLI, IDE extension |
| Automation | A scheduled or recurring Codex task. | App |
| Automation run | One execution of a scheduled automation that may report findings or archive itself. | App |
| Browser use | App capability that lets Codex operate the in-app browser directly. | App |
| Chat | A Codex conversation not tied to a project. | App |
| ChatGPT sign-in | Authentication using a ChatGPT account and workspace permissions. | App, CLI, IDE extension, Cloud |
| Chronicle | Opt-in feature that builds memories from recent screen context. | App |
| Cloud | Mode where Codex works remotely in an OpenAI-managed environment. | App, IDE extension, Web |
| Cloud environment | Configured container setup used for Codex cloud tasks. | Cloud |
| Cloud task | A remotely executed Codex task that runs in a cloud environment. | Cloud |
| Cloud thread | A thread that runs in a Codex cloud environment. | Cloud |
| Codex | OpenAI's coding agent for software development tasks. | App, CLI, IDE extension, Web, Cloud, SDK |
| Codex app | Desktop app for running Codex threads in parallel, with built-in worktree support, automations, and Git functionality. | Desktop |
| Codex app-server | Local JSON-RPC server for embedding Codex threads, turns, approvals, history, and streamed events in custom clients. | App, IDE extension, SDK |
| Codex CLI | Terminal client for running Codex interactively or in scripts. | Terminal |
| Codex cloud | OpenAI-managed execution environment where Codex can work on repository tasks remotely. | Web, App, IDE extension |
| codex exec | CLI command for running Codex non-interactively from scripts or CI. | CLI |
| Codex IDE extension | Editor integration for using Codex inside IDEs like VS Code, JetBrains IDEs, Cursor, and Windsurf. | IDE |
| Codex SDK | Programmatic interface for building Codex-powered workflows or integrations. | SDK |
| Codex web | Browser-based Codex surface for delegating cloud tasks. | Browser |
| Codex-managed worktree | A temporary worktree Codex creates and manages for a thread. | App |
| Compaction | Summarizing older context so long-running work can continue. | App, CLI, IDE extension, Cloud |
| Compliance API | API for exporting Codex activity and audit metadata. | Enterprise |
| Computer use | App capability that lets Codex interact with desktop applications through the UI. | App |
| config.toml | Local Codex configuration files. | App, CLI, IDE extension |
| Connected host | Computer or development environment that provides files, tools, and shell access for remote Codex work. | App, Mobile |
| Connector | App integration that lets Codex access external services. Available through plugins; also called apps. | App, Cloud |
| Container cache | Saved cloud container state reused to speed up future tasks. | Cloud |
| Context | Information Codex can use while working, such as files, prior messages, tool output, and instructions. | App, CLI, IDE extension, Cloud, SDK |
| Context window | The maximum amount of information the model can consider at once. | App, CLI, IDE extension, Cloud, SDK |
| Custom agent | User-defined agent role with its own instructions and settings. | App, CLI |
| Deny-read rule | Filesystem permission rule that prevents Codex from reading sensitive paths or glob matches. | App, CLI, IDE extension, Enterprise |
| Diff | Set of Git file changes shown for inspection, comments, staging, or reverting. | App, Git, Review |
| Domain allowlist | Set of domains Codex cloud can reach when agent internet access is enabled. | Cloud |
| Environment (local) | App configuration to tell Codex how to set up worktrees for a project. | App, Worktree |
| Environment variable | Runtime configuration value available during task execution. | Cloud, CLI, IDE extension |
| Ephemeral session | Non-interactive run that skips saving session state after it completes. | CLI |
| Fast mode | Speed setting that makes supported models respond faster at a higher credit cost. | CLI, IDE extension |
| Filesystem permission | Permission profile rule that grants or denies read and write access to paths. | App, CLI, IDE extension |
| Finding | A notable result or issue surfaced by an automation. | App |
| Full access | Mode where Codex runs without normal sandbox restrictions. | App, CLI, IDE extension |
| Git worktree | A second checkout of the same repository for parallel branch work. | App, Git |
| Handoff | Moving a thread and its work between Local and Worktree. | App |
| Heartbeat | A recurring thread wake-up that returns Codex to the same conversation on a schedule. Also called a thread automation. | App |
| Hook | A lifecycle handler that runs when a Codex event matches, such as tool use, permission requests, or when a turn stops. | App, CLI, IDE extension |
| Hook event | Lifecycle point where configured hook handlers can run. | App, CLI, IDE extension |
| Hunk | Contiguous section of a diff that can be staged, unstaged, or reverted independently. | App, Git, Review |
| Inline comment | Line-specific feedback attached to a diff. | App |
| Live web search | Real-time web lookup for current information. | App, CLI, IDE extension |
| Local | Mode where Codex works on the user's computer. | App, CLI, IDE extension |
| Local thread | A thread that runs on the user's machine. | App, CLI, IDE extension |
| Maintenance script | Optional script run when a cached cloud container resumes. | Cloud |
| Managed configuration | Organization-controlled Codex defaults and restrictions. | Enterprise |
| MCP | Model Context Protocol, a standard for connecting Codex to external tools and context. | App, CLI, IDE extension |
| MCP resource | Readable context exposed by an MCP server for Codex to inspect. | App, CLI, IDE extension |
| MCP server | External tool or context provider exposed through MCP. | App, CLI, IDE extension |
| MCP tool | Action exposed by an MCP server that Codex can call during a task. | App, CLI, IDE extension |
| MDM | Mobile device management tooling for distributing device profiles and managed Codex settings. | Enterprise |
| Memories | Locally stored context Codex can reuse across sessions. | App, CLI, IDE extension |
| Model | The AI model Codex uses for reasoning and tool work. | App, CLI, IDE extension, Cloud, SDK |
| Network access | Permission for commands or environments to reach the internet. | App, CLI, IDE extension, Cloud |
| Network policy | Domain-based allow and deny rules that constrain sandboxed outbound network traffic. | App, CLI, IDE extension |
| Non-interactive mode | CLI mode for running Codex from scripts or CI. | CLI |
| Output schema | JSON Schema passed to codex exec to constrain the final response. |
CLI |
| Permanent worktree | A long-lived worktree kept as its own project. | App |
| Permission profile | Named least-privilege policy that combines filesystem and network rules for local command execution. | App, CLI, IDE extension |
| Plan | Codex's proposed or tracked steps for completing a task. | App, CLI, IDE extension, Cloud |
| Plugin | Installable bundle that can distribute skills, tools, and integrations. | App, CLI, IDE extension |
| Plugin manifest | Plugin metadata file that identifies a plugin and points to bundled skills, apps, MCP servers, hooks, and metadata. | App, CLI, IDE extension, Plugins |
| Prefix rule | Command-rule pattern that allows, prompts for, or forbids matching command prefixes. | App, CLI, IDE extension, Enterprise |
| Profile | Named configuration preset for Codex. | CLI, IDE extension |
| Progressive disclosure | Loading skill details only when needed to preserve context. | App, CLI, IDE extension |
| Project | A selected codebase or folder Codex works in. | App |
| Prompt | The user instruction or request sent to Codex. | App, CLI, IDE extension, Cloud, SDK |
| Pull request review | Codex review of changes or feedback on a pull request. | App, CLI, GitHub |
| RBAC | Role-based access control for workspace permissions. | Enterprise |
| Read-only mode | Mode where Codex can inspect but not modify without approval. | App, CLI, IDE extension |
| Reasoning effort | Setting that controls how much reasoning budget a model uses. | App, CLI, IDE extension, SDK |
| Remote connection | Connection that lets Codex work from another device using a connected host. | App, Mobile |
| requirements.toml | Admin-enforced requirements file for managed Codex setups. | Enterprise |
| Review pane | App view for inspecting diffs, comments, and Git changes. | App |
| Rules | Policies that allow, prompt for, or deny command prefixes or permission exceptions. | App, CLI, IDE extension |
| Sandbox | Enforced boundary limiting what Codex commands can access or modify. | App, CLI, IDE extension |
| Sandbox mode | Configuration that defines Codex's filesystem and network limits. | App, CLI, IDE extension |
| Sandbox preset | SDK shorthand for common sandbox policies such as read-only, workspace-write, or full access. | SDK |
| Schedule | The timing rule for an automation. | App |
| Secret | Encrypted value available to setup scripts but removed before the agent phase. | Cloud |
| Setup script | Script run before the agent starts to install dependencies or prepare tools. | App worktrees |
| Skill | Reusable workflow package with instructions and optional scripts or references. | App, CLI, IDE extension |
| Skill invocation | Explicit or implicit activation of a skill. | App, CLI, IDE extension |
| Slash command | Command entered with a leading slash to control or inspect a Codex CLI session. | CLI |
| Standalone automation | Independent scheduled run that reports separate findings. | App |
| STDIO MCP server | MCP server launched as a local process by a configured command and arguments. | CLI, IDE extension |
| Streamable HTTP MCP server | MCP server reached over HTTP, optionally with bearer token or OAuth authentication. | CLI, IDE extension |
| Subagent | Specialized child agent spawned to work on part of a task. | App, CLI |
| Subagent workflow | Workflow where Codex runs delegated agents in parallel and combines their results. | App, CLI |
| Task | The unit of work Codex is asked to complete. | App, CLI, IDE extension, Cloud, SDK |
| Thread | A single Codex session containing prompts, model output, and tool activity. | App, CLI, IDE extension, Cloud, SDK |
| Thread automation | Recurring wake-up attached to an existing thread. Also called a heartbeat. | App |
| Thread fork | New thread branched from the stored history of an existing thread. | App-server, SDK |
| Turn | One exchange in a thread, usually a user prompt plus Codex's response and actions. | App, CLI, IDE extension, Cloud, SDK |
| Universal image | Default Codex cloud container image with common tools preinstalled. | Cloud |
| Web search cache | Pre-indexed search results Codex can use without live browsing. | App, CLI, IDE extension |
| Worktree | Mode where Codex isolates changes in a separate Git worktree. | App |
| Writable roots | Directories Codex is allowed to modify. | App, CLI, IDE extension |
Term
Definition
The Codex worker that reasons over context, uses tools, and completes a task.
Applies to
App, CLI, IDE extension, Cloud
Term
Definition
Repository or user guidance file that gives Codex persistent instructions.
Applies to
App, CLI, IDE extension, Cloud
Term
Definition
Admin view for Codex usage, adoption, and code review metrics.
Applies to
Enterprise
Term
Definition
Authentication using an OpenAI API key.
Applies to
App, CLI, IDE extension
Term
Definition
Rules for when Codex must ask before taking an action.
Applies to
App, CLI, IDE extension
Term
Definition
Codex asking to allow a restricted action.
Applies to
App, CLI, IDE extension
Term
Definition
Integration that lets Codex access external services. Available through plugins; also called connectors.
Applies to
App, CLI, IDE extension
Term
Definition
Snapshot of the frontmost app window sent to a Codex thread.
Applies to
App
Term
Definition
Locally stored login credentials reused by Codex.
Applies to
App, CLI, IDE extension
Term
Definition
Model-based review of eligible approval requests before they proceed.
Applies to
App, CLI, IDE extension
Term
Definition
A scheduled or recurring Codex task.
Applies to
App
Term
Definition
One execution of a scheduled automation that may report findings or archive itself.
Applies to
App
Term
Definition
App capability that lets Codex operate the in-app browser directly.
Applies to
App
Term
Definition
A Codex conversation not tied to a project.
Applies to
App
Term
Definition
Authentication using a ChatGPT account and workspace permissions.
Applies to
App, CLI, IDE extension, Cloud
Term
Definition
Opt-in feature that builds memories from recent screen context.
Applies to
App
Term
Definition
Mode where Codex works remotely in an OpenAI-managed environment.
Applies to
App, IDE extension, Web
Term
Definition
Configured container setup used for Codex cloud tasks.
Applies to
Cloud
Term
Definition
A remotely executed Codex task that runs in a cloud environment.
Applies to
Cloud
Term
Definition
A thread that runs in a Codex cloud environment.
Applies to
Cloud
Term
Definition
OpenAI's coding agent for software development tasks.
Applies to
App, CLI, IDE extension, Web, Cloud, SDK
Term
Definition
Desktop app for running Codex threads in parallel, with built-in worktree support, automations, and Git functionality.
Applies to
Desktop
Term
Definition
Local JSON-RPC server for embedding Codex threads, turns, approvals, history, and streamed events in custom clients.
Applies to
App, IDE extension, SDK
Term
Definition
Terminal client for running Codex interactively or in scripts.
Applies to
Terminal
Term
Definition
OpenAI-managed execution environment where Codex can work on repository tasks remotely.
Applies to
Web, App, IDE extension
Term
Definition
CLI command for running Codex non-interactively from scripts or CI.
Applies to
CLI
Term
Definition
Editor integration for using Codex inside IDEs like VS Code, JetBrains IDEs, Cursor, and Windsurf.
Applies to
IDE
Term
Definition
Programmatic interface for building Codex-powered workflows or integrations.
Applies to
SDK
Term
Definition
Browser-based Codex surface for delegating cloud tasks.
Applies to
Browser
Term
Definition
A temporary worktree Codex creates and manages for a thread.
Applies to
App
Term
Definition
Summarizing older context so long-running work can continue.
Applies to
App, CLI, IDE extension, Cloud
Term
Definition
API for exporting Codex activity and audit metadata.
Applies to
Enterprise
Term
Definition
App capability that lets Codex interact with desktop applications through the UI.
Applies to
App
Term
Definition
Local Codex configuration files.
Applies to
App, CLI, IDE extension
Term
Definition
Computer or development environment that provides files, tools, and shell access for remote Codex work.
Applies to
App, Mobile
Term
Definition
App integration that lets Codex access external services. Available through plugins; also called apps.
Applies to
App, Cloud
Term
Definition
Saved cloud container state reused to speed up future tasks.
Applies to
Cloud
Term
Definition
Information Codex can use while working, such as files, prior messages, tool output, and instructions.
Applies to
App, CLI, IDE extension, Cloud, SDK
Term
Definition
The maximum amount of information the model can consider at once.
Applies to
App, CLI, IDE extension, Cloud, SDK
Term
Definition
User-defined agent role with its own instructions and settings.
Applies to
App, CLI
Term
Definition
Filesystem permission rule that prevents Codex from reading sensitive paths or glob matches.
Applies to
App, CLI, IDE extension, Enterprise
Term
Definition
Set of Git file changes shown for inspection, comments, staging, or reverting.
Applies to
App, Git, Review
Term
Definition
Set of domains Codex cloud can reach when agent internet access is enabled.
Applies to
Cloud
Term
Definition
App configuration to tell Codex how to set up worktrees for a project.
Applies to
App, Worktree
Term
Definition
Runtime configuration value available during task execution.
Applies to
Cloud, CLI, IDE extension
Term
Definition
Non-interactive run that skips saving session state after it completes.
Applies to
CLI
Term
Definition
Speed setting that makes supported models respond faster at a higher credit cost.
Applies to
CLI, IDE extension
Term
Definition
Permission profile rule that grants or denies read and write access to paths.
Applies to
App, CLI, IDE extension
Term
Definition
A notable result or issue surfaced by an automation.
Applies to
App
Term
Definition
Mode where Codex runs without normal sandbox restrictions.
Applies to
App, CLI, IDE extension
Term
Definition
A second checkout of the same repository for parallel branch work.
Applies to
App, Git
Term
Definition
Moving a thread and its work between Local and Worktree.
Applies to
App
Term
Definition
A recurring thread wake-up that returns Codex to the same conversation on a schedule. Also called a thread automation.
Applies to
App
Term
Definition
A lifecycle handler that runs when a Codex event matches, such as tool use, permission requests, or when a turn stops.
Applies to
App, CLI, IDE extension
Term
Definition
Lifecycle point where configured hook handlers can run.
Applies to
App, CLI, IDE extension
Term
Definition
Contiguous section of a diff that can be staged, unstaged, or reverted independently.
Applies to
App, Git, Review
Term
Definition
Line-specific feedback attached to a diff.
Applies to
App
Term
Definition
Real-time web lookup for current information.
Applies to
App, CLI, IDE extension
Term
Definition
Mode where Codex works on the user's computer.
Applies to
App, CLI, IDE extension
Term
Definition
A thread that runs on the user's machine.
Applies to
App, CLI, IDE extension
Term
Definition
Optional script run when a cached cloud container resumes.
Applies to
Cloud
Term
Definition
Organization-controlled Codex defaults and restrictions.
Applies to
Enterprise
Term
Definition
Model Context Protocol, a standard for connecting Codex to external tools and context.
Applies to
App, CLI, IDE extension
Term
Definition
Readable context exposed by an MCP server for Codex to inspect.
Applies to
App, CLI, IDE extension
Term
Definition
External tool or context provider exposed through MCP.
Applies to
App, CLI, IDE extension
Term
Definition
Action exposed by an MCP server that Codex can call during a task.
Applies to
App, CLI, IDE extension
Term
Definition
Mobile device management tooling for distributing device profiles and managed Codex settings.
Applies to
Enterprise
Term
Definition
Locally stored context Codex can reuse across sessions.
Applies to
App, CLI, IDE extension
Term
Definition
The AI model Codex uses for reasoning and tool work.
Applies to
App, CLI, IDE extension, Cloud, SDK
Term
Definition
Permission for commands or environments to reach the internet.
Applies to
App, CLI, IDE extension, Cloud
Term
Definition
Domain-based allow and deny rules that constrain sandboxed outbound network traffic.
Applies to
App, CLI, IDE extension
Term
Definition
CLI mode for running Codex from scripts or CI.
Applies to
CLI
Term
Definition
JSON Schema passed to codex exec to constrain the final response.
Applies to
CLI
Term
Definition
A long-lived worktree kept as its own project.
Applies to
App
Term
Definition
Named least-privilege policy that combines filesystem and network rules for local command execution.
Applies to
App, CLI, IDE extension
Term
Definition
Codex's proposed or tracked steps for completing a task.
Applies to
App, CLI, IDE extension, Cloud
Term
Definition
Installable bundle that can distribute skills, tools, and integrations.
Applies to
App, CLI, IDE extension
Term
Definition
Plugin metadata file that identifies a plugin and points to bundled skills, apps, MCP servers, hooks, and metadata.
Applies to
App, CLI, IDE extension, Plugins
Term
Definition
Command-rule pattern that allows, prompts for, or forbids matching command prefixes.
Applies to
App, CLI, IDE extension, Enterprise
Term
Definition
Named configuration preset for Codex.
Applies to
CLI, IDE extension
Term
Definition
Loading skill details only when needed to preserve context.
Applies to
App, CLI, IDE extension
Term
Definition
A selected codebase or folder Codex works in.
Applies to
App
Term
Definition
The user instruction or request sent to Codex.
Applies to
App, CLI, IDE extension, Cloud, SDK
Term
Definition
Codex review of changes or feedback on a pull request.
Applies to
App, CLI, GitHub
Term
Definition
Role-based access control for workspace permissions.
Applies to
Enterprise
Term
Definition
Mode where Codex can inspect but not modify without approval.
Applies to
App, CLI, IDE extension
Term
Definition
Setting that controls how much reasoning budget a model uses.
Applies to
App, CLI, IDE extension, SDK
Term
Definition
Connection that lets Codex work from another device using a connected host.
Applies to
App, Mobile
Term
Definition
Admin-enforced requirements file for managed Codex setups.
Applies to
Enterprise
Term
Definition
App view for inspecting diffs, comments, and Git changes.
Applies to
App
Term
Definition
Policies that allow, prompt for, or deny command prefixes or permission exceptions.
Applies to
App, CLI, IDE extension
Term
Definition
Enforced boundary limiting what Codex commands can access or modify.
Applies to
App, CLI, IDE extension
Term
Definition
Configuration that defines Codex's filesystem and network limits.
Applies to
App, CLI, IDE extension
Term
Definition
SDK shorthand for common sandbox policies such as read-only, workspace-write, or full access.
Applies to
SDK
Term
Definition
The timing rule for an automation.
Applies to
App
Term
Definition
Encrypted value available to setup scripts but removed before the agent phase.
Applies to
Cloud
Term
Definition
Script run before the agent starts to install dependencies or prepare tools.
Applies to
App worktrees
Term
Definition
Reusable workflow package with instructions and optional scripts or references.
Applies to
App, CLI, IDE extension
Term
Definition
Explicit or implicit activation of a skill.
Applies to
App, CLI, IDE extension
Term
Definition
Command entered with a leading slash to control or inspect a Codex CLI session.
Applies to
CLI
Term
Definition
Independent scheduled run that reports separate findings.
Applies to
App
Term
Definition
MCP server launched as a local process by a configured command and arguments.
Applies to
CLI, IDE extension
Term
Definition
MCP server reached over HTTP, optionally with bearer token or OAuth authentication.
Applies to
CLI, IDE extension
Term
Definition
Specialized child agent spawned to work on part of a task.
Applies to
App, CLI
Term
Definition
Workflow where Codex runs delegated agents in parallel and combines their results.
Applies to
App, CLI
Term
Definition
The unit of work Codex is asked to complete.
Applies to
App, CLI, IDE extension, Cloud, SDK
Term
Definition
A single Codex session containing prompts, model output, and tool activity.
Applies to
App, CLI, IDE extension, Cloud, SDK
Term
Definition
Recurring wake-up attached to an existing thread. Also called a heartbeat.
Applies to
App
Term
Definition
New thread branched from the stored history of an existing thread.
Applies to
App-server, SDK
Term
Definition
One exchange in a thread, usually a user prompt plus Codex's response and actions.
Applies to
App, CLI, IDE extension, Cloud, SDK
Term
Definition
Default Codex cloud container image with common tools preinstalled.
Applies to
Cloud
Term
Definition
Pre-indexed search results Codex can use without live browsing.
Applies to
App, CLI, IDE extension
Term
Definition
Mode where Codex isolates changes in a separate Git worktree.
Applies to
App
Term
Definition
Directories Codex is allowed to modify.
Applies to
App, CLI, IDE extension
Expand to view all