SpyBara
Go Premium

Documentation 2026-08-24 22:00 UTC to 2026-08-25 19:59 UTC

19 files changed +1,140 −152. View all changes and history on the product overview
2026
Mon 31 19:59 Sat 29 07:02 Fri 28 23:02 Thu 27 21:01 Wed 26 23:58 Tue 25 19:59 Mon 24 22:00 Fri 21 19:59 Thu 20 23:59 Wed 19 22:57 Tue 18 13:01 Mon 17 23:58 Sat 15 01:01 Fri 14 22:00 Thu 13 22:59 Wed 12 19:59 Tue 11 22:59 Mon 10 22:00 Sat 8 03:02 Fri 7 18:59 Thu 6 23:58 Wed 5 19:00 Tue 4 22:00 Mon 3 23:00 Sun 2 21:00
Details

35 href: "/codex/enterprise/chatgpt-work-overview",35 href: "/codex/enterprise/chatgpt-work-overview",

36 icon: "shieldCheck",36 icon: "shieldCheck",

37 },37 },

38 {

39 title: "ChatGPT Work cloud security",

40 description:

41 "Review hosted execution, connected accounts, access controls, retention, and audit visibility.",

42 href: "/codex/enterprise/chatgpt-work-cloud-security",

43 icon: "shieldCheck",

44 },

38 {45 {

39 title: "ChatGPT Work admin FAQ",46 title: "ChatGPT Work admin FAQ",

40 description:47 description:

Details

2 2 

3> For the complete documentation index, see [llms.txt](https://learn.chatgpt.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to the page URL.3> For the complete documentation index, see [llms.txt](https://learn.chatgpt.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to the page URL.

4 4 

5Schedule recurring tasks to run in the background. Review active, paused, and5Schedule recurring tasks to run in the background. On ChatGPT web and mobile,

6completed tasks and recent runs in **Scheduled**. You can combine scheduled6eligible plans can also run tasks from supported app events. Review active,

7tasks with [skills](https://learn.chatgpt.com/docs/build-skills) for more complex work.7paused, and completed tasks and recent runs in **Scheduled**. You can combine

8scheduled tasks with [skills](https://learn.chatgpt.com/docs/build-skills) for more complex work.

8 9 

9<YouTubeEmbed title="Schedule tasks with ChatGPT" videoId="CToxp125mhc" />10 

11 

12[Watch: Schedule tasks with ChatGPT](https://www.youtube.com/watch?v=CToxp125mhc)

10 13 

11<ContentModeSwitch group="codex-surface" id="app">14<ContentModeSwitch group="codex-surface" id="app">

12 15 


80Review the first few runs, then adjust the prompt, tools, or cadence if the83Review the first few runs, then adjust the prompt, tools, or cadence if the

81results are too broad or need additional context.84results are too broad or need additional context.

82 85 

86## Trigger tasks from app events

87 

88On eligible plans, scheduled tasks can run when a supported Gmail, Slack, or

89GitHub event occurs. Event-triggered tasks are available in ChatGPT on the web

90and mobile. They aren't available in the ChatGPT desktop app, Codex CLI, or the

91IDE extension.

92 

93Ask ChatGPT to create the task, then describe the event to watch for and what

94to do when it happens. The trigger determines when the task runs; the saved

95prompt determines what each run does. One task can use multiple event triggers,

96but it can't combine event triggers with a time-based schedule.

97 

98Supported event triggers include:

99 

100- **Gmail:** New incoming messages, optionally filtered by sender or subject.

101- **Slack:** New messages in selected channels, optionally filtered by author

102 and whether thread replies are included. Reactions, edits, deletes, and

103 direct messages aren't supported.

104- **GitHub:** Pull request activity in a repository. Filter by pull request,

105 author, title, or label, and choose whether reviews, comments, commit updates,

106 or only merges should trigger the task.

107 

108Connect and authorize the app before creating the task. For Slack, add

109`@ChatGPT` to every channel the task watches. For GitHub, the connected app

110must have access to the repository.

111 

112When several matching events arrive close together, ChatGPT may combine them

113in one run. Open **Scheduled** to review pending events or choose **Run now**

114to process them.

115 

116Availability depends on your plan and workspace settings. In managed

117workspaces, administrators can control access with the **Allow event-triggered

118scheduled tasks** permission.

119 

83</ContentModeSwitch>120</ContentModeSwitch>

84 121 

85<ContentModeSwitch group="codex-surface" id="app">122<ContentModeSwitch group="codex-surface" id="app">


159## Ask ChatGPT to create or update scheduled tasks196## Ask ChatGPT to create or update scheduled tasks

160 197 

161You can create and update scheduled tasks from a ChatGPT or Codex chat.198You can create and update scheduled tasks from a ChatGPT or Codex chat.

162Describe the work, the schedule, and whether each scheduled run should return to199Describe the work, when it should run, and whether each run should return to the

163the current chat or start a new chat. ChatGPT can draft the prompt, choose the200current chat or start a new chat. ChatGPT can draft the prompt, choose the

164right destination, and update the scheduled task when its scope or cadence201right destination, and update the task when its scope or cadence

165changes.202changes.

166 203 

167For example, ask ChatGPT to schedule a follow-up from the current chat while a204For example, ask ChatGPT to schedule a follow-up from the current chat while a


185Schedule a task inside a chat for:222Schedule a task inside a chat for:

186 223 

187- checking a long-running operation until it finishes224- checking a long-running operation until it finishes

188- polling Slack, GitHub, or another connected source when the results should225- checking a connected source on a fixed cadence when you need a periodic

189 stay in the same chat226 snapshot rather than a response to one supported app event

190- reminding ChatGPT to continue a review loop at a fixed cadence227- reminding ChatGPT to continue a review loop at a fixed cadence

191- running a skill-driven workflow that uses plugins, such as checking PR status228- running a skill-driven workflow that uses plugins, such as checking PR status

192 and addressing new feedback229 and addressing new feedback

app/browser.md +91 −54

Details

34Browser**, you can choose another download location, reset it to the system34Browser**, you can choose another download location, reset it to the system

35default, or turn on **Ask where to save downloads**.35default, or turn on **Ask where to save downloads**.

36 36 

37Use the [Chrome extension](https://learn.chatgpt.com/docs/chrome-extension) instead when ChatGPT needs37Use the [browser extension](https://learn.chatgpt.com/docs/chrome-extension) instead when ChatGPT needs

38to work in an existing Chrome tab or use your regular Chrome profile.38to work in an existing Chrome, Edge, Brave, Opera, or Vivaldi tab or use your

39regular browser profile.

39 40 

40Open the built-in browser from the toolbar, by clicking a URL, by navigating41Open the built-in browser from the toolbar, by clicking a URL, by navigating

41manually, or by pressing <kbd>Cmd</kbd>+<kbd>Shift</kbd>+<kbd>B</kbd>42manually, or by pressing <kbd>Cmd</kbd>+<kbd>Shift</kbd>+<kbd>B</kbd>


79inspect rendered state, take screenshots, and verify the result of its work in80inspect rendered state, take screenshots, and verify the result of its work in

80the page.81the page.

81 82 

82Open the **Plugins** tab and install **Browser**. Then ask ChatGPT or Codex to83Browser is included with the desktop app and installs automatically. Ask ChatGPT

83use the browser in your task, or reference it directly with `@Browser`.84or Codex to use the built-in browser in your task, or reference it directly with

85`@Browser`.

84 86 

85For example:87For example:

86 88 


227 229 

228<ContentModeSwitch group="codex-surface" id="web">230<ContentModeSwitch group="codex-surface" id="web">

229 231 

230With ChatGPT Work on the web, ChatGPT can use a cloud-operated browser to232## Use ChatGPT Work to get things done across the web

231research and interact with public websites. It runs separately from the233 

232browser on your device, so you can delegate web tasks without giving ChatGPT234ChatGPT Work can complete tasks across websites, including sites where you need to sign in.

233access to your open tabs or personal browser history.235 

236Work uses its own browser, running on a separate computer in the cloud, not the browser on your phone or laptop.

237 

238Start a task from ChatGPT Work on web or mobile, and ChatGPT can continue working even if you step away and close your computer. Using its computer, Work can accomplish a wide variety of tasks on the internet by reading, clicking, and typing into web pages. Depending on your request, it may use a plugin, its browser, or both.

239 

240For example, ChatGPT can help you:

241 

242- Find and book a DMV appointment.

243- Sign in to your utility account and compare plans.

244- Find and save apartments that match your criteria.

245- Research competitors on social media.

246- Close the books in your accounting software.

247 

248You control which websites ChatGPT can access, and it is trained to ask for confirmation before consequential actions, such as completing a booking or payment. If ChatGPT is ever blocked for any reason, you can take over its computer and use it yourself on mobile and desktop.

249 

250The ability for ChatGPT Work to navigate to websites that need authentication is available on web and mobile on Plus and Pro plans.

251 

252Availability depends on rollout. Website sign-in isn't available for Enterprise or Edu workspaces.

253 

254## How ChatGPT Work's computer works

255 

256When your task requires a website, ChatGPT uses its own browser to navigate pages, gather information, and complete steps online.

257 

258By default, ChatGPT asks before accessing a new website. You can choose to approve requests individually or adjust your settings to let ChatGPT automatically approve websites relevant to your task. ChatGPT Work will always ask for confirmation before consequential actions, such as submitting your information to book an appointment or completing a payment.

259 

260## Sign in to a website

261 

262If a website requires you to sign in, ChatGPT Work will ask you to sign in. After you authenticate, it will continue working on the signed-in website. Your session will remain active for future tasks, so you do not need to sign in every time.

263 

264### Use the secure sign-in form

265 

266ChatGPT cannot see your username or password, and they are never seen by the model or used in model training. ChatGPT does not store your username or passwords. You can delete your browsing history from all sites or one site individually at any time from **Settings** > **Cloud browser** > **Browser data**, which will log you out from that site.

267 

268When ChatGPT encounters a login screen, it pauses and asks you to enter your credentials and two-factor authentication codes as needed. On iOS, you can use a supported password manager to sign in seamlessly.

269 

270Use the sign-in form provided by ChatGPT. Don't send passwords in the chat.

271 

272![ChatGPT Work on iOS pausing a DMV task and showing a secure sign-in form with the website address and a masked password.](https://developers.openai.com/images/codex/cloud-browser-auth/sign-in.webp)

273 

274### Sign in on the web page

275 

276If offered, select **Sign in on web page instead** to sign in directly in the cloud browser. The task pauses while you sign in. Select **I'm done** to return control to ChatGPT, or skip or cancel the request.

234 277 

235<a id="start-a-browser-task"></a>278<a id="start-a-browser-task"></a>

279<a id="start-browser-work"></a>

280<a id="web-start-browser-work"></a>

236 281 

237## Start browser work282## How to get started with a task in ChatGPT Work

238 283 

2391. Select **ChatGPT**, switch to **Work** in the switcher, and describe the result you want. Include relevant2841. Open ChatGPT on web or mobile and start a task in Work.

240 websites or constraints when they matter.2852. Describe what you want ChatGPT to do.

2412. If ChatGPT needs a website, review the site-access request before allowing2863. Approve website access if prompted.

242 it.2874. Sign in directly if a website requires it.

2433. Follow the browser's progress in the chat. Open **Cloud browser** to inspect2885. Follow the task's progress in the conversation.

244 the page screenshots and replay.2896. Review the result and approve any consequential actions.

2454. Review the result and any sources before using the information.

246 290 

247For example:291You don't need to select the browser separately. ChatGPT decides when to use it based on your request.

248 292 

249```text293Some websites block access. If that happens, ChatGPT will let you know and, when possible, try another way to complete the task.

250Compare the publicly listed prices and cancellation terms for these three

251venues. Return a table with links to each source and flag anything that needs a

252phone call to confirm.

253```

254 294 

255Other useful browser tasks include checking public inventory or appointment295<a id="website-permissions-and-confirmations"></a>

256times, gathering details from an interactive site, and comparing options whose296<a id="web-website-permissions-and-confirmations"></a>

257information is spread across several pages.

258 297 

259## Website permissions and confirmations298## Security and user controls

260 299 

261ChatGPT asks before accessing a new website by default. The permission applies300In ChatGPT settings, open **Cloud browser** to manage website permissions. Available options include:

262to the site shown in the request, so check the hostname before allowing it.

263 301 

264In ChatGPT settings, open **Cloud browser** to manage website permissions. You302- **Always ask**: Review every website access request manually.

265can choose **Always ask**, **Auto approve**, or **Always allow**, and you can303- **Auto approve**: Let ChatGPT automatically approve access after it checks for the relevancy of the website to your task.

266allow or block individual sites. **Auto approve** lets ChatGPT approve requests304- **Always allow**: Allow website access without that additional review step. We offer this option for minimal friction, but do not recommend this option.

267after its risk checks; **Always allow** removes that review step for website

268access. Use the least-permissive setting that works for your task.

269 305 

270A website permission doesn't approve every action. ChatGPT may ask separately306![Cloud browser settings showing the Always ask, Auto approve, and Always allow website permission options.](https://developers.openai.com/images/codex/cloud-browser-auth/website-permissions.webp)

271for permission before performing consequential actions.

272 307 

273## Browser data308You can also allow or block individual websites to override your default permissions.

274 309 

275The cloud-operated browser keeps its cookies and browser data separate from the310Before ChatGPT asks you to sign in to any website, an additional review model checks the sign-in request and where your information will be entered for signs of phishing or deception. We test the agent against risks including prompt injection, phishing, and unintended actions.

276browser on your device. Clearing cloud browser data doesn't clear cookies from

277your device. To remove its cookies, open **Cloud browser** in ChatGPT settings,

278select **Browser data**, and choose **Clear all**.

279 311 

280Don't rely on open pages or browser history being available in a later chat.312For full transparency, you'll see the website's address and a preview of its sign-in form, and you can inspect the live website before continuing. Credentials entered through the secure sign-in form go directly to the browser and are not visible to the model.

281Include the important sites and context when you start new work.313 

314<a id="browser-data"></a>

315<a id="web-browser-data"></a>

316 

317## Privacy and browser data

318 

319ChatGPT Work's computer runs separately from the browser on your device. It maintains its own cookies, browser data, and signed-in sessions. Information ChatGPT uses while completing a task follows the ChatGPT data-control settings you choose. You can review these in ChatGPT web and mobile under **Settings** > **Data controls**.

320 

321It doesn't use your personal browser's open tabs, browsing history, saved passwords, cookies, extensions, or existing signed-in sessions.

322 

323To clear browser data, go to **Settings** > **Cloud browser** > **Browser data** > **Clear all**. This signs you out of websites in ChatGPT Work's browser, so you'll need to sign in again for future tasks.

324 

325![Cloud browser settings with a Browser data section and a Cookies control for managing cookies saved by the cloud browser.](https://developers.openai.com/images/codex/cloud-browser-auth/browser-data.webp)

282 326 

283## Limitations327## Limitations

284 328 

285- The browser supports public, signed-out websites. It can't sign in to an329- Website sign-in isn't available in every workspace or rollout. If a task requires a sign-in method that isn't supported, complete that step yourself or use another available tool.

286 account, ask for credentials, or use the signed-in session from your browser.330- Some sites block automated browsers or require a CAPTCHA. ChatGPT may not be able to complete a task on those sites.

287- Some sites block automated browsers or require a CAPTCHA. ChatGPT may not be331- Availability of cloud browsing can depend on your plan, workspace settings, and rollout. Cloud browsing is available in all regions on paid plans other than Free and Go. Enterprise admins must enable cloud browsing for their workspace.

288 able to complete a task on those sites.332 

289- The browser is separate from the browser on your device. It can't use your333During rollout, the browser might not appear immediately even when your plan supports it.

290 open tabs, extensions, saved passwords, or local browser history.

291- Availability can depend on your plan, workspace settings, and rollout. It is

292 available in all regions on paid plans other than Free and Go. Enterprise

293 admins must enable it for their workspace.

294 

295During rollout, the browser might not appear immediately even when your plan

296supports it.

297 334 

298</ContentModeSwitch>335</ContentModeSwitch>

Details

1# Chrome extension1# Browser extension

2 2 

3> For the complete documentation index, see [llms.txt](https://learn.chatgpt.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to the page URL.3> For the complete documentation index, see [llms.txt](https://learn.chatgpt.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to the page URL.

4 4 

5Use the Chrome extension to let ChatGPT control your Chrome browser. ChatGPT can5Use the ChatGPT browser extension to work in Google Chrome, Microsoft Edge,

6read or act on sites where you're already signed in, such as LinkedIn,6Brave, Opera, or Vivaldi from the ChatGPT desktop app. ChatGPT can read or act

7Salesforce, Gmail, or internal tools.7on sites where you're already signed in, such as LinkedIn, Salesforce, Gmail,

8or internal tools.

9 

10All five browsers support tab mentions and browser control from the desktop

11app. Chrome, Edge, Brave, and Vivaldi also support side chat. **Opera doesn't

12support side chat**; start its tasks in the desktop app instead.

13 

14Update the ChatGPT desktop app before setting up another browser. Browser

15availability can depend on rollout and your workspace settings.

8 16 

9To let ChatGPT control its built-in browser instead, use `@Browser`. The17To let ChatGPT control its built-in browser instead, use `@Browser`. The

10[built-in browser](https://help.openai.com/en/articles/20001277-using-the-built-in-browser-in-the-chatgpt-desktop-app)18[built-in browser](https://help.openai.com/en/articles/20001277-using-the-built-in-browser-in-the-chatgpt-desktop-app)

11supports sign-in and keeps browsing work inside ChatGPT without using your19supports sign-in and keeps browsing work inside ChatGPT without using your

12Chrome profile.20regular browser profile.

13 21 

14ChatGPT can also switch between tools as a task requires, using plugins when a22ChatGPT can also switch between tools as a task requires, using plugins when a

15dedicated integration is available, Chrome when it needs logged-in browser23dedicated integration is available, your browser when it needs signed-in browser

16context, and the built-in browser for localhost.24context, and the built-in browser for localhost.

17 25 

18 26 


26 34 

27 35 

28 36 

29## Use ChatGPT from Chrome37<a id="use-chatgpt-from-chrome"></a>

38 

39## Use side chat in your browser

40 

41Side chat is available in Chrome, Edge, Brave, and Vivaldi.

30 42 

31Open ChatGPT beside the page you're viewing to ask about the page or continue43Open ChatGPT beside the page you're viewing to ask about the page or continue

32into tasks that can use its context alongside local files and connected apps.44into tasks that can use its context alongside local files and connected apps.

33ChatGPT can use context from your open tabs when a task needs it.45ChatGPT can use context from your open tabs when a task needs it.

34 46 

351. Open the page you want to work with.471. Open the page you want to work with.

362. Select ChatGPT from the Chrome toolbar or **Extensions** menu. On macOS, you482. Select ChatGPT from the browser toolbar or **Extensions** menu. On macOS, you

37 can also press <kbd>Cmd</kbd>+<kbd>Shift</kbd>+<kbd>.</kbd>.49 can also press <kbd>Cmd</kbd>+<kbd>Shift</kbd>+<kbd>.</kbd>.

383. Ask a question about the page or give ChatGPT a task.503. Ask a question about the page or give ChatGPT a task.

39 51 

40The panel stays with the tab where you opened it. Chats you start in Chrome52The panel stays with the tab where you opened it. Chats you start in side chat

41are available in the ChatGPT app, and you can open recent ChatGPT chats in53are available in the ChatGPT app, and you can open recent ChatGPT chats in

42Chrome, so you can continue work in either place.54the side chat, so you can continue work in either place.

43 55 

44 56 

45 57 


49 61 

50## Bring tabs and selected text into a chat62## Bring tabs and selected text into a chat

51 63 

52Mention an open Chrome tab in the side chat when you want ChatGPT to use that64Mention an open browser tab in the desktop app when you want ChatGPT to use

53page as context. You can also highlight text on a page and bring the selection65that page as context. In browsers with side chat, you can also mention tabs

54into your chat to ask about a specific passage without copying the whole page.66there, or highlight text on a page and bring the selection into your chat to

67ask about a specific passage without copying the whole page.

55 68 

56To start from the page instead, right-click it and select **Ask ChatGPT**. The69In browsers with side chat, you can also right-click the page and select

57side chat opens with the relevant page context so you can continue the request70**Ask ChatGPT**. The side chat opens with the relevant page context so you can

58in Chrome.71continue the request in your browser.

59 72 

60### Ask about a YouTube video73### Ask about a YouTube video

61 74 

62Open a YouTube video, then ask a question about it in the Chrome side chat.75Open a YouTube video, then ask a question about it in a supported side chat.

63When captions are available, ChatGPT can use the video's timestamped transcript76When captions are available, ChatGPT can use the video's timestamped transcript

64to explain, summarize, or answer questions about the content.77to explain, summarize, or answer questions about the content.

65 78 


67context. Review the page and any requested permissions before asking ChatGPT to80context. Review the page and any requested permissions before asking ChatGPT to

68use or act on that information.81use or act on that information.

69 82 

70## Set up the Chrome extension83<a id="set-up-the-chrome-extension"></a>

71 84 

72Open the **Plugins** tab and install **Chrome**. Other Chromium-based browsers85## Set up your browser

73aren't currently supported. Follow the setup flow to:

74 86 

751. Install the [Chrome87Install the browser on your computer, then open **Settings > Computer Use** in

76 extension](https://chromewebstore.google.com/detail/chatgpt/hehggadaopoacecdllhhajmbjkdcmajg).88the ChatGPT desktop app. Expand **More browsers** if your browser isn't shown

772. Approve Chrome's permission prompts.89in the main list.

783. Open Chrome and confirm the ChatGPT side chat loads.90 

911. Select your browser and follow any prompt to install the required plugin.

922. Select **Install** beside the browser to open its extension store page.

93 Install the ChatGPT extension and review the browser's permission prompts.

943. Return to **Computer Use** and confirm that the browser shows **Manage**.

954. Start a ChatGPT Work or Codex chat and select your browser with an

96 `@`-mention. Use the browser profile where you installed the extension.

97 

98The browser's toggle in **Computer Use** controls whether it appears in the

99`@`-mention menu. Select **Manage** to change website permissions instead.

79 100 

80 101 

81 102 


83 104 

84 105 

85 106 

86## Start a Chrome task from ChatGPT107<a id="start-a-chrome-task-from-chatgpt"></a>

87 108 

88After the plugin setup is complete, start a new ChatGPT Work or Codex chat.109## Start a browser task from ChatGPT

89ChatGPT can use Chrome automatically when a task needs a website and you're110 

90already signed in to Chrome. You can also invoke it directly in a prompt:111After setup, start a new ChatGPT Work or Codex chat. Select **Chrome**, **Edge**,

112**Brave Browser**, **Opera**, or **Vivaldi** from the `@`-mention menu to choose

113which browser ChatGPT uses. For example:

91 114 

92```text115```text

93@Chrome open Salesforce and update the account from these call notes.116@Edge open Salesforce and update the account from these call notes.

94```117```

95 118 

96If Chrome isn't already open, ChatGPT can open it. Chrome browser tasks run in119You can also mention an open tab to give ChatGPT context from that page.

97Chrome tab groups so the work for a task stays grouped together.120Opera supports these desktop workflows even though it doesn't have side chat.

98 121 

99## Control website access122## Control website access

100 123 


112### Manage allowed and blocked websites135### Manage allowed and blocked websites

113 136 

114In the ChatGPT desktop app, go to **Settings** > **Computer Use**, then select137In the ChatGPT desktop app, go to **Settings** > **Computer Use**, then select

115**Manage** next to **Google Chrome** to manage an allowlist and blocklist for138**Manage** next to your browser to manage an allowlist and blocklist for

116domains. The allowlist contains domains ChatGPT can use without asking again.139domains. The allowlist contains domains ChatGPT can use without asking again.

117The blocklist contains domains ChatGPT shouldn't use.140The blocklist contains domains ChatGPT shouldn't use. The supported browsers

141share these website permissions.

118 142 

119Removing a domain from the allowlist means ChatGPT asks again before using it.143Removing a domain from the allowlist means ChatGPT asks again before using it.

120Removing a domain from the blocklist means ChatGPT can ask again instead of144Removing a domain from the blocklist means ChatGPT can ask again instead of


124 148 

125If you select **Allow for all sites**, ChatGPT no longer asks for confirmation149If you select **Allow for all sites**, ChatGPT no longer asks for confirmation

126before using websites. Only choose this option if you trust ChatGPT to use any150before using websites. Only choose this option if you trust ChatGPT to use any

127website open in Chrome.151website open in the browser.

128 152 

129#### Browser history <ElevatedRiskBadge class="ml-2" />153#### Browser history <ElevatedRiskBadge class="ml-2" />

130 154 

131Browser history can include sensitive telemetry, internal URLs, search terms,155Browser history can include sensitive telemetry, internal URLs, search terms,

132and activity from Chrome sessions on signed-in devices. If you allow ChatGPT to156and activity from browser sessions on signed-in devices. If you allow ChatGPT to

133access browser history, relevant history entries can become part of the context157access browser history, relevant history entries can become part of the context

134ChatGPT uses for the task. Malicious or misleading page content can increase the158ChatGPT uses for the task. Malicious or misleading page content can increase the

135risk that ChatGPT copies this data somewhere unintended.159risk that ChatGPT copies this data somewhere unintended.


139 163 

140## Data and security164## Data and security

141 165 

142### Chrome extension permissions166<a id="chrome-extension-permissions"></a>

167 

168### Browser extension permissions

143 169 

144Chrome asks you to accept extension permissions when you install the extension.170Your browser asks you to accept permissions when you install the extension.

145The permission prompt may include:171For example, Chrome's permission prompt may include:

146 172 

147- Access the page debugger173- Access the page debugger

148- Read and change all your data on all websites174- Read and change all your data on all websites


153- Communicate with cooperating native applications179- Communicate with cooperating native applications

154- View and manage your tab groups180- View and manage your tab groups

155 181 

156These Chrome permissions make the extension capable of operating browser182These extension permissions make it capable of operating browser

157workflows. ChatGPT still uses its own confirmations, settings, allowlists, and183workflows. ChatGPT still uses its own confirmations, settings, allowlists, and

158blocklists before using websites or browser history during a task.184blocklists before using websites or browser history during a task.

159 185 

160### Memories186### Memories

161 187 

162Computer Use follows your Memories setting. If Memories is on, ChatGPT can188Computer Use follows your Memories setting. If Memories is on, ChatGPT can

163use relevant saved memories while working in Chrome. If Memories is off, browser189use relevant saved memories while working in your browser. If Memories is off,

164control doesn't use memories.190browser control doesn't use memories.

165 191 

166### What OpenAI stores from browsing192### What OpenAI stores from browsing

167 193 

168OpenAI doesn't store a separate complete record of your Chrome actions from the194OpenAI doesn't store a separate complete record of your browser actions from the

169extension. OpenAI stores browser activity only when it becomes part of the ChatGPT195extension. OpenAI stores browser activity only when it becomes part of the ChatGPT

170context, such as text ChatGPT reads from a page, screenshots, tool calls,196context, such as text ChatGPT reads from a page, screenshots, tool calls,

171summaries, messages, or other content included in the chat.197summaries, messages, or other content included in the chat.


176 202 

177## Troubleshooting203## Troubleshooting

178 204 

179If ChatGPT can't connect to Chrome, first confirm the website ChatGPT is trying to205If ChatGPT can't connect to your browser, first confirm the website ChatGPT is trying to

180access isn't in the blocklist in Settings. If the website isn't blocked, work206access isn't in the blocklist in Settings. If the website isn't blocked, work

181through these checks:207through these checks:

182 208 

1831. Update the ChatGPT desktop app. If you have more than one ChatGPT or Codex2091. Update the ChatGPT desktop app. If you have more than one ChatGPT or Codex

184 desktop app installed, update each one or remove copies you no longer use.210 desktop app installed, update each one or remove copies you no longer use.

1852. Close the ChatGPT side panel, restart Chrome, then reopen the extension from2112. Restart your browser. In Chrome, Edge, Brave, or Vivaldi, reopen ChatGPT from

186 the Chrome toolbar or **Extensions** menu. Confirm the side chat loads. If212 the toolbar or **Extensions** menu and confirm the side chat loads. Opera

187 it doesn't load or mentions a missing native host, remove and re-add the213 doesn't have side chat; check its connection from the desktop app.

188 Chrome plugin from **Plugins** in the ChatGPT desktop app, then follow the2143. In **Settings > Computer Use**, confirm that your browser appears and shows

189 setup flow again.215 **Manage**. If it still shows **Install**, follow the setup flow again.

1903. In the app, select ChatGPT and turn on Work in the switcher, or select Codex. Open216 Turn on its toggle if the browser is missing from the `@`-mention menu.

191 **Plugins** and confirm that the Chrome plugin is on. If the plugin is off,2174. Make sure you are using the browser profile where the extension is

192 turn it on and try the task again.218 installed. If you use more than one profile, install and enable the

1934. Make sure you are using the same Chrome profile where the extension is

194 installed. If you use more than one Chrome profile, install and enable the

195 extension in the active profile.219 extension in the active profile.

1965. Start a new ChatGPT Work or Codex chat and try the Chrome task again. This can2205. Start a new ChatGPT Work or Codex chat and try the browser task again. This can

197 clear chat-specific connection state.221 clear chat-specific connection state.

1986. Restart the ChatGPT desktop app, then try again. If the extension still2226. Restart the ChatGPT desktop app, then try again. If the extension still

199 doesn't connect, uninstall the Chrome extension, remove and re-add the Chrome223 doesn't connect, reinstall it through **Settings > Computer Use**.

200 plugin from **Plugins**, and follow the setup flow again.2247. If ChatGPT still can't use the browser, run `/feedback`

2017. If the side chat loads but ChatGPT still can't use Chrome, run `/feedback`

202 in the app and include the chat ID when you contact support.225 in the app and include the chat ID when you contact support.

203 226 

204### Upload files227### Upload files

app/features.md +3 −2

Details

140 icon: "workspace",140 icon: "workspace",

141 },141 },

142 {142 {

143 title: "Chrome extension",143 title: "Browser extension",

144 description: "Share browser context with ChatGPT from Chrome.",144 description:

145 "Use Chrome, Edge, Brave, Opera, or Vivaldi with ChatGPT.",

145 href: "/codex/chrome-extension",146 href: "/codex/chrome-extension",

146 icon: "connect",147 icon: "connect",

147 },148 },

app/settings.md +1 −1

Details

79## Browser79## Browser

80 80 

81Use these settings to install or enable the bundled Browser plugin, set up the81Use these settings to install or enable the bundled Browser plugin, set up the

82[Chrome extension](https://learn.chatgpt.com/docs/chrome-extension), and manage allowed and blocked82[browser extension](https://learn.chatgpt.com/docs/chrome-extension), and manage allowed and blocked

83websites. ChatGPT asks before using a website unless you've allowed it. Removing83websites. ChatGPT asks before using a website unless you've allowed it. Removing

84a blocked site lets ChatGPT ask again before using it in the browser.84a blocked site lets ChatGPT ask again before using it in the browser.

85 85 

Details

6structure, and review criteria that matter for the task. The preview and review6structure, and review criteria that matter for the task. The preview and review

7tools depend on the surface you use.7tools depend on the surface you use.

8 8 

9<YouTubeEmbed9 

10 title="Work with documents, spreadsheets, and presentations in ChatGPT"10 

11 videoId="E3dDr_QtBuo"11[Watch: Work with documents, spreadsheets, and presentations in ChatGPT](https://www.youtube.com/watch?v=E3dDr_QtBuo)

12/>

13 12 

14<ContentModeSwitch group="codex-surface" id="app">13<ContentModeSwitch group="codex-surface" id="app">

15 14 

developers.md +7 −0

Details

57 href: "/codex/build-plugins",57 href: "/codex/build-plugins",

58 icon: "connect",58 icon: "connect",

59 },59 },

60 {

61 title: "Site tools (WebMCP)",

62 description:

63 "Use WebMCP to give AI agents a direct way to work with your website.",

64 href: "/codex/webmcp",

65 icon: "tools",

66 },

60 {67 {

61 title: "Hooks",68 title: "Hooks",

62 description: "Run custom commands when Codex emits lifecycle events.",69 description: "Run custom commands when Codex emits lifecycle events.",

Details

1# ChatGPT Work cloud security

2 

3> For the complete documentation index, see [llms.txt](https://learn.chatgpt.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to the page URL.

4 

5ChatGPT Work runs cloud tasks in an isolated environment on OpenAI-managed

6infrastructure. This guide explains what those tasks can access, which controls

7administrators can apply, and how retention and auditing apply to different

8categories of information.

9 

10Capabilities and controls depend on the workspace plan, rollout, configuration,

11and connected integration. For the broader execution model, see the

12[ChatGPT Work Overview](https://learn.chatgpt.com/docs/enterprise/chatgpt-work-overview).

13 

14## Security at a glance

15 

16- Tasks in the cloud run on OpenAI-managed infrastructure, not on the user's

17 device.

18- A cloud task doesn't inherit local files, desktop applications, browser

19 sessions, or private-network access from that device.

20- Connected apps use the permissions of the authorized account, which can be an

21 individual, shared, or agent-owned account.

22- Workspace and feature-specific controls govern Work access, local

23 execution, cloud browsing, connected apps, and code or shell networking.

24- Business, Enterprise, and Edu workspace data is encrypted in transit and at

25 rest and isn't used to train OpenAI models by default.

26- Retention and audit visibility depend on the data category, storage location,

27 event, and applicable product configuration.

28 

29## Where cloud tasks run

30 

31People can start cloud tasks from supported ChatGPT web, mobile, or desktop

32experiences. Work on the web and mobile runs in the cloud. The desktop app can

33run cloud or local tasks when the corresponding permissions are available and

34enabled.

35 

36The user's device sits within the organization's own IT-managed trust

37boundary, outside OpenAI-operated systems. Starting a cloud task from the

38desktop app doesn't give the task direct access to the user's computer.

39Execution stays in the OpenAI-managed environment regardless of the surface

40used to start it.

41 

42Work Cloud uses the Codex task-execution harness. Work and Codex share core

43execution and isolation mechanisms, but their available tools, permissions, and

44administrative controls aren't identical. The customer controls workspace

45access, approved connections, and information intentionally supplied to a task;

46OpenAI manages the hosted execution environment.

47 

48Work Cloud runs on shared, OpenAI-managed infrastructure. In the current

49supported execution path, tasks run in VM-backed sandboxes, with execution state

50associated with the authenticated account user in the workspace. Work can reuse

51an environment across tasks or replace it while preserving eligible state. This

52doesn't mean every task receives a new container or that each customer has a

53dedicated physical host. Customers don't provide, host, or manage Work Cloud

54containers.

55 

56## What a cloud task can access

57 

58A cloud task can use information made available through an authorized path:

59 

60- Information a person enters into a conversation.

61- Files intentionally uploaded, attached from Library, or made available

62 through a project.

63- Content retrieved through an enabled app and an authorized account

64 connection.

65- Website content accessed through an enabled cloud browser or another

66 permitted web capability, subject to applicable access controls.

67 

68A cloud task doesn't directly inherit access to local files, installed

69applications, or the user's browser session. A device's access to a corporate

70VPN, internal website, or private network doesn't grant the cloud task that

71access.

72 

73An authorized connection can make information from an internal system available

74through its own access path. That connection doesn't give the cloud task

75unrestricted access to the employee's device or network.

76 

77## Apps, plugins, and connected accounts

78 

79An app can give Work access to information or actions in another system. A

80plugin can use an app as one of its underlying tools. Making a plugin available

81doesn't automatically enable the underlying app, authorize an account, or

82approve every action the integration can perform.

83 

84A task that uses an app or connector can proceed only when:

85 

86- The workspace enables the app and any plugin that requires it.

87- The person has the necessary workspace or role access.

88- The connection is authorized for an individual, shared, or agent-owned

89 account.

90- The connected account, approved scopes, and available app action settings

91 permit the requested information or operation.

92 

93For apps that support **Action control**, administrators can allow read-only

94actions, all actions, or a custom set. **App permissions** control when

95ChatGPT asks for confirmation to work with an app. Depending on the app and

96workspace, options can include **Always ask**, **Any changes**, **Important

97actions**, and **Never ask**. With **Any changes**, supported reads can proceed

98without a prompt while changes require confirmation.

99 

100When the approval policy allows it, an authorized action, including a write,

101can run without a prompt. This doesn't expand the app's allowed actions,

102workspace access, or the connected account's permissions. ChatGPT can still

103block some high-risk actions.

104 

105Confirm the plugin and each underlying app are available in the workspace.

106Review role access, connected-account authorization, and action permissions as

107distinct decisions. See

108[Plugin controls](https://learn.chatgpt.com/docs/enterprise/apps-and-connectors).

109 

110### Personal and shared connections

111 

112A personal connection uses the connected employee's permissions in the source

113system. A shared or agent-owned connection uses the permissions of its

114connected account instead. That account might access information or perform

115actions that the requesting person couldn't access with a personal account.

116 

117Before enabling a shared connection, limit the account's permissions and

118scopes, choose who can use it, and review the actions it can perform. See

119[Workspace Agent connections and permissions](https://help.openai.com/en/articles/20001143-chatgpt-workspace-agents-for-enterprise-and-business).

120 

121Content retrieved from a connected app isn't automatically saved as a Library

122file. If the content is later saved to a conversation, project, Library, or

123synced index, that copy follows the rules for its saved location.

124 

125## Cloud browser and network access

126 

127The cloud browser, web search, connected apps, and code or shell networking are

128separate capabilities, and can each be configured. Restricting one doesn't

129automatically disable the others.

130 

131### Cloud browser

132 

133The cloud browser is a hosted tool a Work task can use to interact with

134websites. Opening ChatGPT in a web browser or desktop app doesn't enable cloud

135browsing; a cloud task can run without it.

136 

137The hosted browser doesn't inherit the user's local browser profile, open tabs,

138existing sign-ins, saved passwords, password manager, or browsing history.

139 

140Supported website interactions can include public forms and can combine

141information from an authorized app with a website task. Where available,

142website permissions include **Always ask**, **Auto approve**, and **Always

143allow**. **Auto approve** applies automated risk checks; **Always allow**

144removes the interactive website-access review. Neither grants new app

145permissions or approves every action on a website. Consequential actions can

146still require separate confirmation.

147 

148For a Work task to use the cloud browser in an Enterprise workspace,

149administrators must enable both Work access and cloud browser access. See

150[Using cloud browser in ChatGPT](https://help.openai.com/en/articles/20001280-using-cloud-browser-in-chatgpt).

151 

152### Code and shell networking

153 

154Public internet access for code or shell execution follows its own network

155policy. When public internet access is off, network destinations required for

156ChatGPT Work can remain reachable through a managed destination allowlist.

157 

158The allowlist governs network destinations, not shell commands. Disabling

159public internet access for code or shell execution doesn't, by itself, disable

160the cloud browser, web search, or connected apps. Changes to the network

161setting apply after the current code run or shell command finishes and the

162execution environment refreshes.

163 

164See [Code and shell sandboxing](https://learn.chatgpt.com/docs/sandboxing?surface=web).

165 

166## Data handling and retention

167 

168Business, Enterprise, and Edu workspace data is encrypted in transit and at

169rest. OpenAI doesn't use an organization's business inputs or outputs to train

170or improve its models by default. See

171[Enterprise privacy](https://openai.com/enterprise-privacy/).

172 

173Information associated with a cloud task doesn't follow one universal

174retention schedule:

175 

176| Data category | Retention and deletion behavior |

177| ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |

178| Work conversations | Follow the workspace conversation-retention settings. Deleted chats are generally scheduled for permanent deletion within 30 days, subject to published security, legal, and de-identification exceptions. |

179| Hosted execution state and snapshots | Follow a separate lifecycle from conversations and files. Access to execution state is scoped to the account user, and the workspace conversation-retention setting informs eligible stored snapshots. Ending a task or deleting a chat doesn't immediately purge every related artifact. |

180| Files saved to Library | Uploaded or generated files follow applicable Library and workspace retention rules. Deleting a conversation doesn't delete a file saved to Library. |

181| Project files | Remain associated with their project until removed or the project is deleted, subject to applicable deletion rules. |

182| Saved memories, when enabled | Follow separate memory controls. Deleting a conversation doesn't necessarily delete an existing saved memory. |

183| Transient uploads | Eligible temporary Enterprise uploads outside Library can expire after 48 hours unless another applicable retention setting applies. |

184| Connected-app content | Source-system records follow that system's policies. Copies saved to a conversation, project, Library, or synced index follow the rules for their saved location. |

185| Cloud browser data | Hosted browser data is separate from local browser data. Users can remove saved cloud browser cookies through the applicable settings. |

186| Compliance records | Compliance Logs Platform records are available for 30 days. Exported copies follow the receiving system's retention policy. |

187 

188Deleting a conversation, removing a Library file or saved memory,

189disconnecting an app, and clearing hosted browser data are separate actions.

190Review the relevant storage location instead of assuming one action removes

191every copy. See

192[Chat and file retention policies](https://help.openai.com/en/articles/8983778-chat-and-file-retention-policies-in-chatgpt).

193 

194Retaining appropriate conversation and execution context can help Work resume

195interrupted tasks, refer to previous steps, and produce more consistent results.

196Shorter retention or deletion can reduce that continuity, so choose settings

197that balance security requirements with the usefulness of the workflow.

198 

199Eligible Enterprise and Edu workspaces can use Enterprise Key Management for

200supported stored content, including supported hosted execution snapshots when

201customer-managed encryption is required. Coverage varies by data category and

202deployment. Rotating a key doesn't delete existing data or, by itself, deny

203access to earlier encrypted content. Revoking or disabling key access is a

204separate action that can disrupt supported workflows. Neither replaces a

205retention or deletion policy.

206 

207Data residency and inference residency apply only to eligible content and

208supported workloads, subject to the organization's agreement, region, and

209configuration. Connected apps, external providers, and some processing or

210synced indexes can follow separate location rules. Verify support for the

211product, integration, and region. See

212[Data residency and inference residency](https://help.openai.com/en/articles/9903489-data-residency-and-inference-residency-for-chatgpt).

213 

214OpenAI API [Zero Data Retention](https://developers.openai.com/api/docs/guides/your-data#zero-data-retention)

215is an API-specific control and doesn't define retention for ChatGPT Work.

216 

217## Administrator access controls

218 

219Review the controls that apply to each part of a cloud task:

220 

221- **Work Cloud and Work Local:** Where independent controls are available,

222 manage cloud and local Work as distinct controls in **Workspace settings** >

223 **Permissions & roles**. In other workspaces, local Work can share a control

224 with Codex Local.

225- **Apps and plugins:** Choose which integrations are available and which

226 people or roles can use them.

227- **Connected-account actions:** Review account permissions, application

228 scopes, and available action or confirmation controls.

229- **Browser and networking:** Assess cloud browser access and code or shell

230 public-network access independently.

231 

232Where separate **Work Cloud** and **Work Local** controls are available, enable

233**Work Cloud** and disable **Work Local** for the intended role to permit cloud

234Work without local execution. Where local Work and Codex share a control,

235review the effect on both before disabling local execution. These controls

236don't prevent an authorized person from intentionally uploading a file to a

237cloud task.

238 

239For supported role permissions with **Default**, **On**, and **Off** states,

240**Default** inherits the workspace setting, **On** grants access, and an

241explicit **Off** in any applicable ordinary role denies access. Some Work and

242plugin settings use different, two-state controls. Verify each person's

243effective access, especially when more than one role applies. See

244[Role-based access control](https://help.openai.com/en/articles/11750701-rbac).

245 

246Where available, the **Work Cloud** permission applies across supported web,

247mobile, and desktop experiences. It doesn't independently select which of those

248surfaces can run cloud tasks. Consider device-management or other access

249controls if a deployment must exclude a particular surface.

250 

251## Audit and compliance visibility

252 

253For eligible Enterprise and Edu workspaces, the Compliance Logs Platform can

254include supported Work prompts and responses. Connected-app calls have separate

255logs, and available source-system audit records vary by integration.

256Supported compliance endpoints can provide access to eligible Library files.

257 

258Coverage depends on the event and the system where it occurs. Don't assume

259every shell command, browser interaction, app invocation, file operation, or

260approval appears in a customer-visible compliance export.

261 

262Endpoint monitoring can observe the ChatGPT client or network traffic on managed

263devices, but can't inspect actions inside the hosted execution environment. Use

264supported Work, compliance, and connected-system records instead.

265 

266Review current compliance event coverage alongside workspace reporting,

267connected-system audit logs, and the retention policies of systems receiving

268exported records. See the

269[OpenAI Compliance Platform](https://help.openai.com/en/articles/9261474-compliance-api-for-chatgpt-enterprise-edu-and-chatgpt-for-teachers).

270 

271## Start with a restricted, useful workflow

272 

273A security team can upload a current vendor advisory, compare it with an

274authorized asset inventory, and review a draft exposure assessment before

275taking action. If cloud browsing or an app connection isn't enabled, the team

276can provide the advisory and an approved inventory extract directly.

277 

278Start with a small group and enable only the access needed for the task. Verify

279connected-account permissions, data retention, human review points, and

280available logs before expanding the rollout. For rollout planning, see the

281[Admin rollout guide](https://learn.chatgpt.com/docs/enterprise/admin-setup).

Details

17web. Availability and administrative controls depend on your plan and workspace17web. Availability and administrative controls depend on your plan and workspace

18configuration.18configuration.

19 19 

20For a focused review of hosted execution, connected-account permissions,

21browser and network settings, retention, and audit visibility, see

22[ChatGPT Work cloud security](https://learn.chatgpt.com/docs/enterprise/chatgpt-work-cloud-security).

23 

20## Execution isolation, files, and device access24## Execution isolation, files, and device access

21 25 

22The files and tools available to ChatGPT Work depend on where Work is running,26The files and tools available to ChatGPT Work depend on where Work is running,


95browser. It can't access local tabs, extensions, browsing history, saved99browser. It can't access local tabs, extensions, browsing history, saved

96passwords, or authenticated local sessions.100passwords, or authenticated local sessions.

97 101 

98The cloud browser supports public, signed-out websites. It can navigate pages,102The cloud browser can navigate public websites, enter information into supported

99enter information into supported public forms, and combine relevant information103public forms, and combine relevant information from an approved app with a

100from an approved app with a website task. It can't accept credentials, use a104website task. Website sign-in through the cloud browser isn't available in

101password manager or saved form entries, sign in to a website, or complete105Enterprise or Edu workspaces. Browser availability depends on your plan,

102payments. If a task requires one of those unsupported steps, it stops. Browser106region, rollout, and workspace permissions.

103availability depends on your plan, region, rollout, and workspace permissions.

104For Enterprise workspaces, an administrator must enable cloud browser access in107For Enterprise workspaces, an administrator must enable cloud browser access in

105addition to Work access.108addition to Work access.

106 109 


135For Enterprise and Edu workspaces, plugins and their underlying apps are off by138For Enterprise and Edu workspaces, plugins and their underlying apps are off by

136default. For Business workspaces, plugins and apps are on by default. Making a139default. For Business workspaces, plugins and apps are on by default. Making a

137plugin available doesn't automatically enable its required app or grant access140plugin available doesn't automatically enable its required app or grant access

138to a user's account. The user must enable the plugin and authenticate before141to an account. The required connection must be authorized for an individual,

139ChatGPT Work can access it.142shared, or agent-owned account before ChatGPT Work can access it. A shared or

143agent-owned connection uses the connected account's source-system permissions,

144which can differ from the requesting user's permissions.

140 145 

141Where supported, administrators can restrict an app to read-only actions or an146Where supported, administrators can restrict an app to read-only actions or an

142approved set of actions. App permission settings can also determine whether147approved set of actions. App permission settings can also determine whether


169 174 

170### Retention depends on the data type175### Retention depends on the data type

171 176 

172- **Work conversations**—Follow the applicable ChatGPT workspace conversation177- **Work conversations:** Follow the applicable ChatGPT workspace conversation

173 retention and deletion settings.178 retention and deletion settings.

174- **Files saved to Library**—Follow the applicable file and workspace179- **Files saved to Library:** Follow the applicable file and workspace

175 retention rules. Deleting a conversation doesn't delete files stored in180 retention rules. Deleting a conversation doesn't delete files stored in

176 Library.181 Library.

177- **Project files**—Remain with the project until its deletion, subject to the182- **Project files:** Remain with the project until its deletion, subject to the

178 applicable deletion rules and exceptions.183 applicable deletion rules and exceptions.

179- **Transient uploads outside Library**—For Enterprise, transient uploads can184- **Transient uploads outside Library:** For Enterprise, transient uploads can

180 expire after 48 hours unless a different retention setting applies.185 expire after 48 hours unless a different retention setting applies.

181- **Saved memories, when enabled**—Follow separate memory controls.186- **Saved memories, when enabled:** Follow separate memory controls.

182- **Cloud browser cookies**—Remain separate from local browser data. Users can187- **Cloud browser cookies:** Remain separate from local browser data. Users can

183 clear them from the Cloud browser settings.188 clear them from the Cloud browser settings.

184- **Compliance Logs Platform records**—Remain available in the platform for 30189- **Compliance Logs Platform records:** Remain available in the platform for 30

185 days. Exported copies follow the receiving system's retention policy.190 days. Exported copies follow the receiving system's retention policy.

186- **Connected application data**—Source records follow the connected191- **Connected application data:** Source records follow the connected

187 application's policies. Copies saved in a chat, file, or synced index also192 application's policies. Copies saved in a chat, file, or synced index also

188 follow the applicable OpenAI storage and retention rules.193 follow the applicable OpenAI storage and retention rules.

189 194 

ide/settings.md +1 −1

Details

79## Browser79## Browser

80 80 

81Use these settings to install or enable the bundled Browser plugin, set up the81Use these settings to install or enable the bundled Browser plugin, set up the

82[Chrome extension](https://learn.chatgpt.com/docs/chrome-extension), and manage allowed and blocked82[browser extension](https://learn.chatgpt.com/docs/chrome-extension), and manage allowed and blocked

83websites. ChatGPT asks before using a website unless you've allowed it. Removing83websites. ChatGPT asks before using a website unless you've allowed it. Removing

84a blocked site lets ChatGPT ask again before using it in the browser.84a blocked site lets ChatGPT ask again before using it in the browser.

85 85 

Details

8Review, available in research preview, provides a more in-depth review of8Review, available in research preview, provides a more in-depth review of

9potential security issues in a pull request.9potential security issues in a pull request.

10 10 

11<YouTubeEmbed11 

12 title="Codex code review walkthrough"12 

13 videoId="HwbSWVg5Ln4"13[Watch: Codex code review walkthrough](https://www.youtube.com/watch?v=HwbSWVg5Ln4)

14 class="max-w-md mr-auto"14 

15/>

16 15 

17 16 

18 17 

Details

79## Browser79## Browser

80 80 

81Use these settings to install or enable the bundled Browser plugin, set up the81Use these settings to install or enable the bundled Browser plugin, set up the

82[Chrome extension](https://learn.chatgpt.com/docs/chrome-extension), and manage allowed and blocked82[browser extension](https://learn.chatgpt.com/docs/chrome-extension), and manage allowed and blocked

83websites. ChatGPT asks before using a website unless you've allowed it. Removing83websites. ChatGPT asks before using a website unless you've allowed it. Removing

84a blocked site lets ChatGPT ask again before using it in the browser.84a blocked site lets ChatGPT ask again before using it in the browser.

85 85 

sites.md +3 −0

Details

434frameworks, private networks, databases, background services, and hosting434frameworks, private networks, databases, background services, and hosting

435patterns aren't supported.435patterns aren't supported.

436 436 

437HTTP, HTTPS, and WebSockets are supported. Raw inbound and outbound TCP

438connections aren't.

439 

437Each Site has these storage limits:440Each Site has these storage limits:

438 441 

439| Resource | Limit |442| Resource | Limit |

Details

6right instructions, resources, and tools. They reduce the need to paste the6right instructions, resources, and tools. They reduce the need to paste the

7same prompt, template, requirements, or process into every chat.7same prompt, template, requirements, or process into every chat.

8 8 

9<YouTubeEmbed title="Plugins in ChatGPT" videoId="pKwRNdDtai0" />9 

10 

11[Watch: Plugins in ChatGPT](https://www.youtube.com/watch?v=pKwRNdDtai0)

10 12 

11- A **skill** packages instructions and supporting resources for a specific13- A **skill** packages instructions and supporting resources for a specific

12 task or workflow.14 task or workflow.

Details

1---

2name: Build an AI tour guide

3tagline: Help users learn your app with a tour that adapts as they go.

4summary: Use Codex to add a WebMCP-powered tour to your web app. Highlight the

5 next control, explain what to do, and adapt the guidance to the user's current

6 state while they complete the steps themselves.

7bestFor:

8 - Teams helping new users complete their first workflow in a web app.

9 - Onboarding flows that change with sign-in status, connected services, or

10 open panels.

11 - Tasks where users should learn the controls and perform the actions

12 themselves.

13starterPrompt:

14 title: Build an AI tour guide

15 body: >-

16 Add a guided tour to [web app/repository] so Codex can show users how to

17 [complete one specific workflow].

18 

19 

20 Read the app's existing UI, state management, and documentation first. Use

21 WebMCP to let Codex:

22 

23 - discover tour targets through stable, semantic IDs, labels, and

24 descriptions

25 

26 - highlight a target with a short explanation and dismiss the highlight

27 

28 - read the UI state needed to choose the next step

29 

30 - wait for the user to act, then read the updated state

31 

32 - read the app's instructions and relevant documentation

33 

34 

35 The user should complete the workflow themselves. Keep tour tools separate

36 from tools that perform actions, and preserve the app's existing

37 authentication and permission checks.

38 

39 

40 Start with one complete flow. Reuse the existing components and design

41 system. Test the tour in a browser environment where Codex can call the

42 WebMCP tools, including different starting states, a canceled step, and a

43 target that isn't visible yet.

44 

45 

46 Summarize what changed, what you verified, and any setup still needed. Do

47 not deploy or publish without my approval.

48 suggestedEffort: high

49relatedLinks:

50 - label: Automating repetitive work at OpenAI with Codex

51 url: /blog/automating-repetitive-work-at-openai-with-codex

52 - label: Runme

53 url: https://web.runme.dev

54 - label: QA your app with Computer Use

55 url: /use-cases/qa-your-app-with-computer-use

56---

57 

58> For the complete documentation index, see [llms.txt](/llms.txt). Markdown versions of documentation pages are available by appending `.md` to the page URL.

59 

60## Introduction

61 

62Some workflows are easier to learn when someone shows you where to go and what to select. Use Codex to build a tour that guides users through your web app while they perform the actions themselves.

63 

64With WebMCP tools for your app's controls, state, and documentation, Codex can choose the next instruction based on what the user sees. A user who hasn't connected a service needs a different first step from someone who has already completed setup.

65 

66## How to use

67 

681. Open your app's repository in Codex and choose one workflow to guide, such as connecting a service or adding a folder.

692. Provide the relevant documentation and describe the starting states the tour should handle.

703. Run the starter prompt on this page to add tour targets, UI-state tools, and access to the app's instructions.

714. Test the flow in a browser environment where Codex can call your app's WebMCP tools. Ask Codex to guide you, then complete each step yourself.

72 

73Keep the first tour narrow. Verify that it can guide a user from setup to completion before adding more workflows.

74 

75## Example: Add a Google Drive folder in Runme

76 

77In [Runme](https://web.runme.dev), users edit notebooks and use a file explorer to add Google Drive folders and navigate their files. The tour helps a new user find those controls and learn the flow.

78 

79To learn more about Runme, you can read [Automating repetitive work at OpenAI with Codex](https://developers.openai.com/blog/automating-repetitive-work-at-openai-with-codex).

80 

81Watch Codex highlight Runme's controls and explain their purpose. The screenshots below show a separate, task-focused tour for adding a Google Drive folder.

82 

83<figure class="not-prose my-4">

84 <video

85 class="w-full rounded-lg border border-default"

86 controls

87 muted

88 playsinline

89 preload="metadata"

90 poster="https://cdn.openai.com/devhub/codex-use-cases/build-an-ai-tour-guide/tour-demo-poster.webp"

91 aria-label="Codex demonstrates an AI tour of Runme's controls"

92 >

93 <source

94 src="https://cdn.openai.com/devhub/codex-use-cases/build-an-ai-tour-guide/runme-ai-tour-demo.webm"

95 type="video/webm"

96 />

97 Your browser does not support the video tag.

98 </video>

99</figure>

100 

101The Google Drive tour starts with a request:

102 

103 

104 

105**Prompt:**

106 

107```text

108Show me how to add a Google Drive folder.

109```

110 

111### Connect Google Drive

112 

113Codex checks whether Google Drive is connected. If it isn't, Codex highlights **Connect Google Drive** and asks the user to select it and complete the connection.

114 

115![Codex highlights Connect Google Drive in Runme and explains how to start.](https://cdn.openai.com/devhub/codex-use-cases/build-an-ai-tour-guide/connect-google-drive.webp)

116 

117### Open the file explorer

118 

119After the connection is complete, Codex guides the user to the file explorer. The next instruction follows the updated app state.

120 

121![Codex highlights the control for opening Runme's file explorer.](https://cdn.openai.com/devhub/codex-use-cases/build-an-ai-tour-guide/open-file-explorer.webp)

122 

123### Add the folder

124 

125Once the user expands the toolbar, Codex highlights the control for adding a Google Drive folder. The user stays in control of the interaction and learns where to find it next time.

126 

127![Codex highlights the control for adding a Google Drive folder in Runme.](https://cdn.openai.com/devhub/codex-use-cases/build-an-ai-tour-guide/add-google-drive-folder.webp)

128 

129## Give Codex the context to guide users

130 

131Runme's implementation provides three kinds of context: tour targets, application state, and documentation. The tool names below come from Runme; adapt the same roles to your app.

132 

133### Make controls discoverable

134 

135Give tour targets stable, semantic `data-tour-id` values, with a label and description for each. Runme exposes these controls through three WebMCP tools:

136 

137- `listTargets` lists the registered targets, IDs, labels, and descriptions.

138- `showTourStep({ target, title?, message, placement? })` highlights a target and displays an explanation.

139- `dismiss` removes the highlight.

140 

141This gives Codex a way to identify and explain a control without performing its action for the user.

142 

143### Read state and wait for the user

144 

145Runme keeps tour-related state outside React and exposes it through a controller. Its `getUiSnapshot` tool provides the current UI state, including sign-in status. `waitForUiChange(...)` lets Codex wait for a change, such as the user selecting the highlighted control.

146 

147Ask Codex to read the state again after each interaction. Advancing the tour should depend on what happened in the app, not on whether Codex has already shown an instruction.

148 

149### Keep instructions with the app

150 

151Runme bundles Markdown documentation with the application and makes it available through WebMCP:

152 

153- `readInstructionsForAIAgents` explains how Codex should interact with the app and its tools.

154- `listDocumentation()` lists the available pages and their descriptions.

155- `getDocumentation({ name })` returns a selected page as Markdown.

156 

157The tour instructions and tools can ship with the app, without a separate Codex plugin for the tour.

158 

159## Review the tour

160 

161Try the same request from different starting states. Check that the tour skips completed setup, waits for the user, and updates its guidance when the UI changes.

162 

163Also test a canceled step and a control that isn't visible yet. Codex should explain what is missing or choose a valid next step. It shouldn't claim that an action succeeded just because it highlighted a button.

164 

165Keep authentication, permission checks, and user actions in the existing app flow. The tour should help users understand the interface without bypassing those controls.

166 

167## Good follow-ups

168 

169Once the first flow works, continue in the same chat:

170 

171- "Test this tour when Google Drive is already connected and the file explorer is closed."

172- "Handle a user canceling a step, then asking to continue the tour."

173- "Add a tour for [next workflow], reusing the existing targets and state tools."

use-chatgpt.md +1 −1

Details

73 with [Sites](https://learn.chatgpt.com/docs/sites).73 with [Sites](https://learn.chatgpt.com/docs/sites).

74- **Work across websites and apps.** Use the [browser](https://learn.chatgpt.com/docs/browser) to74- **Work across websites and apps.** Use the [browser](https://learn.chatgpt.com/docs/browser) to

75 research and interact with websites. In the desktop app, use the75 research and interact with websites. In the desktop app, use the

76 [Chrome extension](https://learn.chatgpt.com/docs/chrome-extension),76 [browser extension](https://learn.chatgpt.com/docs/chrome-extension),

77 [Computer Use](https://learn.chatgpt.com/docs/computer-use), and [appshots](https://learn.chatgpt.com/docs/appshots) when77 [Computer Use](https://learn.chatgpt.com/docs/computer-use), and [appshots](https://learn.chatgpt.com/docs/appshots) when

78 those features are available.78 those features are available.

79- **Run code and review technical work.** Run code and shell commands, analyze79- **Run code and review technical work.** Run code and shell commands, analyze

webmcp.md +160 −0 created

Details

1# Site tools

2 

3> For the complete documentation index, see [llms.txt](https://learn.chatgpt.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to the page URL.

4 

5Site tools are ChatGPT's implementation of the proposed

6[WebMCP standard](https://webmachinelearning.github.io/webmcp/). With WebMCP,

7a website can offer useful actions directly to an AI agent alongside the

8interface people already use. You and the agent can work with the same live

9page and signed-in session.

10 

11In the [built-in browser](https://learn.chatgpt.com/docs/browser) in the ChatGPT desktop app, ChatGPT

12Work and Codex can discover and use these tools when they are available.

13 

14Use GPT-5.6 Sol or GPT-5.6 Terra for site tools. GPT-5.6 Luna currently has

15 WebMCP disabled. Update the ChatGPT desktop app to the latest version. Site

16 tools aren't available in Enterprise or Edu workspaces. Availability also

17 depends on rollout and the tools provided by the current page.

18 

19## WebMCP vs. MCP

20 

21[Model Context Protocol (MCP)](https://modelcontextprotocol.io/docs/learn/architecture)

22connects an AI application to a local or remote server. Its tools can work

23independently of an open webpage, such as searching a service or managing

24records through an API.

25 

26[WebMCP](https://github.com/webmachinelearning/webmcp) lets a website make its

27capabilities available to an agent as a set of predefined tools. The agent can

28discover them when it visits, so people don't need to install a separate MCP

29server or set up another connection to use those capabilities.

30 

31This approach is useful when you and the agent need to see the same thing, such as

32when editing a canvas or exploring a dashboard. A

33[plugin with an MCP server](https://learn.chatgpt.com/docs/build-plugins) can provide an integration

34that works independently of an open page. A website can support both.

35 

36## How it works in the browser

37 

38Open a website in the built-in browser and ask ChatGPT Work or Codex to help

39with a task. If the page offers site tools, the agent can discover and use the

40relevant actions in the website you're viewing. For example, a document

41editor might let the agent find a section or leave a comment for you to review.

42 

43Select **Site tools** in the browser's address bar to see what the website

44provides. Choose **Available site tools** to inspect the individual tools. The

45browser checks each request before the website carries it out, and the agent

46can inspect the page to see what changed. When recent activity is available,

47choose **Recently used** to open **Sources** and review those calls.

48 

49In this example, expand **Available site tools** to inspect the tools provided

50by [Margin](https://margin-local-docs.openai.chatgpt.site).

51 

52 

53 

54> Illustration: ChatGPT's built-in browser showing the Site tools menu for Margin, with 10 available tools.

55 

56 

57 

58Tools belong to the page that provides them. Closing or navigating away from a

59page can make its tools unavailable. If no suitable tool is available, the

60agent may still be able to use its regular browser capabilities.

61 

62## Example: Explore OpenAI documentation

63 

64ChatGPT Learn and OpenAI Developers offer site tools for finding and reading

65documentation. Select **Open in ChatGPT** in the composer to open Learn in the

66desktop app's browser beside a new chat with this prompt ready to send.

67 

68 

69 

70**Prompt:**

71 

72```text

73Find the documentation for building reusable skills, open the relevant page, and explain when I should turn a skill into a plugin.

74```

75 

76The agent can use these tools to search, read, and open the relevant page:

77 

78| Tool | What it does |

79| ----------------------- | ------------------------------------------------------------------------ |

80| `search_openai_docs` | Searches OpenAI documentation. |

81| `lookup_page` | Reads a documentation page by path or URL. |

82| `lookup_context` | Reads the current docs route and selected text. |

83| `navigate_to_page` | Opens a matching page on the current documentation site. |

84| `generate_custom_guide` | Starts a custom build or learning guide and returns its status and link. |

85 

86Docs Agent generates a custom guide asynchronously. Receiving its link doesn't

87mean generation has finished.

88 

89## Security and user controls

90 

91Website-provided tool definitions and results are untrusted content. A tool's

92name or claim that it only reads data isn't proof of what it does. Website

93instructions don't give the agent permission to share unrelated information or

94take sensitive actions.

95 

96In the built-in browser, each tool invocation receives a safety review before

97it runs. Normal website-access and confirmation policies still apply, including

98for consequential actions such as sending messages, making purchases, deleting

99data, or changing permissions. The browser ties each invocation to its

100originating page and tool registration. These checks reduce risk; they don't

101make a website or its output trustworthy.

102 

103You can turn off **Enable site tools** in **Settings > Browser > Permissions**.

104Review the site, requested action, and result before sharing sensitive

105information or relying on a change.

106 

107Report security vulnerabilities through OpenAI's

108[Security Bug Bounty program](https://bugcrowd.com/engagements/openai). For AI

109safety risks, see the

110[Safety Bug Bounty program](https://openai.com/index/safety-bug-bounty/). Follow

111each program's scope and submission instructions.

112 

113## Add WebMCP to your website

114 

115You can ask Codex to add WebMCP support to the web app or

116[Site](https://learn.chatgpt.com/docs/sites) you're working on. Describe what an agent should be able

117to do, and ask Codex to reuse the application's existing logic and permissions.

118 

119Start with an operation your application already supports. For example:

120 

121- A dashboard that lets the agent set a date range and inspect the data behind

122 a chart.

123- A document editor that lets the agent find a section, suggest an edit, or

124 leave a comment for you to review.

125- A travel planner that lets the agent compare options and update an itinerary

126 while you inspect the map.

127 

128You can also write the code yourself. In your page's JavaScript module, check

129for browser support and register a tool. This read-only example returns the

130current page's title:

131 

132```javascript

133if (typeof document.modelContext?.registerTool === "function") {

134 await document.modelContext.registerTool({

135 name: "get_page_title",

136 description: "Read the title of the current page.",

137 inputSchema: {

138 type: "object",

139 properties: {},

140 additionalProperties: false,

141 },

142 annotations: { readOnlyHint: true },

143 execute: async () => ({ title: document.title }),

144 });

145}

146```

147 

148A compatible agent can discover `get_page_title` and receive the page's

149current title. For a tool that accepts arguments, describe them in the input

150schema and use them in the `execute` handler to call your application's

151existing logic.

152 

153Keep inputs narrow, describe side effects, and return enough information to

154verify the result. Use your application's existing authentication,

155authorization, and input validation. Preserve the normal interface for people

156and browsers that don't support WebMCP.

157 

158For API details and examples, see the

159[WebMCP specification](https://webmachinelearning.github.io/webmcp/) and

160[Chrome's developer guide](https://developer.chrome.com/docs/ai/webmcp).

whats-new.md +254 −0

Details

6work, with examples and links to learn more. For every versioned update, bug fix,6work, with examples and links to learn more. For every versioned update, bug fix,

7and minor improvement, see the [Codex changelog](https://learn.chatgpt.com/docs/changelog).7and minor improvement, see the [Codex changelog](https://learn.chatgpt.com/docs/changelog).

8 8 

9## August 24–28, 2026

10 

11### Work with more websites

12 

13- **Use your browser:** Work in [Edge, Brave, Opera, or Vivaldi](https://learn.chatgpt.com/docs/chrome-extension)

14 as well as Chrome from the ChatGPT desktop app. Bring an open tab into a

15 ChatGPT Work or Codex chat and work with the website where you're already

16 signed in. Opera supports browser control but doesn't have side chat.

17 

18- **Use a website's tools:** With [Site tools (WebMCP)](https://learn.chatgpt.com/docs/webmcp), ChatGPT

19 Work and Codex can use actions offered by a website in the desktop app's

20 built-in browser. For example, a document editor can provide tools to find

21 a section or add a comment. Update the desktop app and use GPT-5.6 Sol or

22 GPT-5.6 Terra. Site tools aren't available with GPT-5.6 Luna or in Enterprise

23 or Edu workspaces.

24 

25- **Sign in through the cloud browser:** On eligible plans, continue a task

26 that needs a website account in ChatGPT Work on the web, iOS, or Android.

27 Follow the [sign-in request](https://learn.chatgpt.com/docs/browser?surface=web#web-sign-in-to-a-website)

28 and enter your details in the sign-in flow, not in the chat. This doesn't

29 connect your local browser profile. Website sign-in isn't available for

30 Enterprise or Edu workspaces.

31 

32Availability depends on rollout and workspace settings.

33 

34 

35 

36**Prompt:**

37 

38```text

39Use @Edge to read the current page and turn it into a concise checklist.

40```

41 

42[Read the August 25 browser release

43notes](https://learn.chatgpt.com/docs/changelog#codex-2026-08-25-browser).

44 

45### Run scheduled tasks from app events

46 

47[Scheduled tasks](https://learn.chatgpt.com/docs/automations?surface=web#web-trigger-tasks-from-app-events) can now

48start when a supported event occurs in Gmail, Slack, or GitHub. Use an event

49trigger to triage new email, summarize channel activity, or act on pull request

50feedback without polling on a fixed cadence.

51 

52Event-triggered tasks are available in ChatGPT on the web and mobile for

53eligible plans. Connect the relevant app and approve its requested access first. In managed

54workspaces, administrators can control access.

55 

56 

57 

58**Prompt:**

59 

60```text

61When one of my pull requests in <owner>/<repository> receives new review feedback, summarize the feedback and prepare a revision plan.

62```

63 

64[Read the August 25 release

65notes](https://learn.chatgpt.com/docs/changelog#codex-2026-08-25-event-triggers).

66 

9## August 17–21, 202667## August 17–21, 2026

10 68 

11### Work with more of your apps and content69### Work with more of your apps and content


32 90 

33[Read the August 20 release notes](https://learn.chatgpt.com/docs/changelog#codex-2026-08-20-app).91[Read the August 20 release notes](https://learn.chatgpt.com/docs/changelog#codex-2026-08-20-app).

34 92 

93 

94 

95> Shared threads in Codex and ChatGPT Work let you show the process behind your build with a read-only link

96 

97[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2090555241343418814) (2026-08-20)

98 

35### Work with GitLab projects in Codex cloud99### Work with GitLab projects in Codex cloud

36 100 

37[GitLab support](https://learn.chatgpt.com/docs/third-party/gitlab) is available in beta on all ChatGPT101[GitLab support](https://learn.chatgpt.com/docs/third-party/gitlab) is available in beta on all ChatGPT


86Find the document and Slack thread I was reviewing earlier, then summarize the decisions I still need to act on.150Find the document and Slack thread I was reviewing earlier, then summarize the decisions I still need to act on.

87```151```

88 152 

153 

154 

155[Watch: Computer History in ChatGPT](https://www.youtube.com/watch?v=W-HhMUe9hOg)

156 

89### Use the ChatGPT desktop app on Linux157### Use the ChatGPT desktop app on Linux

90 158 

91The [ChatGPT desktop app for Linux](https://learn.chatgpt.com/docs/linux/linux-app) is now available in159The [ChatGPT desktop app for Linux](https://learn.chatgpt.com/docs/linux/linux-app) is now available in


97Codex. Some features, including Computer Use, aren't yet available in the165Codex. Some features, including Computer Use, aren't yet available in the

98Linux preview.166Linux preview.

99 167 

168 

169 

170> Now in preview: The ChatGPT desktop app for Linux.

171 

172[View @OpenAI on X](https://x.com/OpenAI/status/2087231350134980830) (2026-08-11)

173 

100### Bring your existing agent setup and work with you174### Bring your existing agent setup and work with you

101 175 

102[Import instructions, settings, skills, plugins, projects, and recent176[Import instructions, settings, skills, plugins, projects, and recent


110[Read the August 11 desktop and CLI release184[Read the August 11 desktop and CLI release

111notes](https://learn.chatgpt.com/docs/changelog#codex-2026-08-11-app).185notes](https://learn.chatgpt.com/docs/changelog#codex-2026-08-11-app).

112 186 

187 

188 

189> You can now keep your work from other agents in sync with ChatGPT Work and Codex.

190 

191[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2087242829076791392) (2026-08-11)

192 

113### Choose the right access for defensive security work193### Choose the right access for defensive security work

114 194 

115Daybreak now offers two tiers for approved defenders. **Daybreak Blue** supports195Daybreak now offers two tiers for approved defenders. **Daybreak Blue** supports


124[Read the August 10 Daybreak204[Read the August 10 Daybreak

125announcement](https://learn.chatgpt.com/docs/changelog#codex-2026-08-10-daybreak).205announcement](https://learn.chatgpt.com/docs/changelog#codex-2026-08-10-daybreak).

126 206 

207 

208 

209> We’re expanding our cybersecurity initiative Daybreak

210 

211[View @OpenAI on X](https://x.com/OpenAI/status/2086864365379010729) (2026-08-10)

212 

127## August 3–7, 2026213## August 3–7, 2026

128 214 

129### Talk through files and projects with ChatGPT Voice215### Talk through files and projects with ChatGPT Voice


200filesystem or network permissions. Amazon Bedrock sessions also gain cached286filesystem or network permissions. Amazon Bedrock sessions also gain cached

201web search and remote conversation compaction.287web search and remote conversation compaction.

202 288 

289 

290 

291[Watch: Introducing Agent Plugins](https://www.youtube.com/watch?v=UaeWJK_vv-Y)

292 

203### Follow and resume deeper security scans293### Follow and resume deeper security scans

204 294 

205Hosted Codex Security plugin versions `0.1.16` through `0.1.18` add live scan295Hosted Codex Security plugin versions `0.1.16` through `0.1.18` add live scan


224Business, Edu, and Pro customers. It isn't available on Plus, and usage limits314Business, Edu, and Pro customers. It isn't available on Plus, and usage limits

225can apply.315can apply.

226 316 

317 

318 

319> Now in research preview: Codex Security Review

320 

321[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2085482310636560830) (2026-08-06)

322 

227## July 27–31, 2026323## July 27–31, 2026

228 324 

229### Use GPT-5.6 Terra and Luna at lower rates325### Use GPT-5.6 Terra and Luna at lower rates


233[usage limits and rates](https://learn.chatgpt.com/docs/pricing) make Terra a stronger fit for everyday329[usage limits and rates](https://learn.chatgpt.com/docs/pricing) make Terra a stronger fit for everyday

234work and Luna especially useful for focused coding and high-volume tasks.330work and Luna especially useful for focused coding and high-volume tasks.

235 331 

332 

333 

334> Starting today, we are reducing prices for GPT-5.6 Luna by 80% and GPT-5.6 Terra by 20%

335 

336[View @OpenAI on X](https://x.com/OpenAI/status/2082878156483219672) (2026-07-30)

337 

236### Find useful context across your browser and open tabs338### Find useful context across your browser and open tabs

237 339 

238In the ChatGPT desktop app, the [built-in browser](https://learn.chatgpt.com/docs/browser) can find340In the ChatGPT desktop app, the [built-in browser](https://learn.chatgpt.com/docs/browser) can find


246requests to use browser history before ChatGPT includes that information in a348requests to use browser history before ChatGPT includes that information in a

247task.349task.

248 350 

351 

352 

353> In Side Chat, ask about a YouTube video, reference your open tabs, or highlight text on a page and ask away.

354 

355[View @ChatGPT on X](https://x.com/ChatGPT/status/2082970812584432115) (2026-07-30)

356 

249### Review changes across repositories357### Review changes across repositories

250 358 

251When a [local project contains more than one359When a [local project contains more than one


269versions you want to keep, and ask for targeted edits without leaving the chat.377versions you want to keep, and ask for targeted edits without leaving the chat.

270Learn more about [image generation](https://learn.chatgpt.com/docs/image-generation).378Learn more about [image generation](https://learn.chatgpt.com/docs/image-generation).

271 379 

380 

381 

382> ImageGen in Codex just got a new lightbox and canvas.

383 

384[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2082944138635595782) (2026-07-30)

385 

272### Find chats that need your attention386### Find chats that need your attention

273 387 

274The desktop app's new **Activity view** brings together chats you recently388The desktop app's new **Activity view** brings together chats you recently


278[Read the July 30 desktop release392[Read the July 30 desktop release

279notes](https://learn.chatgpt.com/docs/changelog#codex-2026-07-30-app).393notes](https://learn.chatgpt.com/docs/changelog#codex-2026-07-30-app).

280 394 

395 

396 

397> The new Activity view in the ChatGPT desktop app brings together conversations that need your attention

398 

399[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2083288643310133716) (2026-07-31)

400 

281### Connect partner tools with Sign in with ChatGPT401### Connect partner tools with Sign in with ChatGPT

282 402 

283**Sign in with ChatGPT** is rolling out in beta to supported plugins and403**Sign in with ChatGPT** is rolling out in beta to supported plugins and


303[institutional verification and a qualifying research423[institutional verification and a qualifying research

304paper](https://help.openai.com/en/articles/20001406).424paper](https://help.openai.com/en/articles/20001406).

305 425 

426 

427 

428[Watch: We're giving 100,000 academic researchers free access to our frontier models](https://www.youtube.com/watch?v=MLehRytu9Zo)

429 

306### Continue Codex tasks more reliably on iOS430### Continue Codex tasks more reliably on iOS

307 431 

308ChatGPT for iOS 1.2026.202 reconnects to tasks more reliably when you return to432ChatGPT for iOS 1.2026.202 reconnects to tasks more reliably when you return to


343tools. The package is public, but running scans still requires Codex Security467tools. The package is public, but running scans still requires Codex Security

344access. Some full-repository scans also require Trusted Access for Cyber.468access. Some full-repository scans also require Trusted Access for Cyber.

345 469 

470 

471 

472> You can now use it to scan repositories, track findings across runs, verify fixes, and add security checks to CI/CD.

473 

474[View @OpenAI on X](https://x.com/OpenAI/status/2082263717916586117) (2026-07-29)

475 

346### Organize sessions and extend Codex CLI 0.146.0476### Organize sessions and extend Codex CLI 0.146.0

347 477 

348[Codex CLI 0.146.0](https://github.com/openai/codex/releases/tag/rust-v0.146.0)478[Codex CLI 0.146.0](https://github.com/openai/codex/releases/tag/rust-v0.146.0)


396Voice is available with Plus, Pro, Business, Edu, and Enterprise plans in the526Voice is available with Plus, Pro, Business, Edu, and Enterprise plans in the

397desktop app and through [Remote on iOS](https://learn.chatgpt.com/docs/remote-connections#set-up-mobile-access).527desktop app and through [Remote on iOS](https://learn.chatgpt.com/docs/remote-connections#set-up-mobile-access).

398 528 

529 

530 

531[Watch: Building with ChatGPT Voice](https://www.youtube.com/watch?v=E0ZMOschrTU)

532 

399### Work across multiple folders in one local project533### Work across multiple folders in one local project

400 534 

401Local projects in the ChatGPT desktop app can now include multiple related535Local projects in the ChatGPT desktop app can now include multiple related


408 542 

409[Read the July 23 release notes](https://learn.chatgpt.com/docs/changelog#codex-2026-07-23-app).543[Read the July 23 release notes](https://learn.chatgpt.com/docs/changelog#codex-2026-07-23-app).

410 544 

545 

546 

547> Local projects can now include related code, docs, and reference files from multiple folders.

548 

549[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2080390328880951299) (2026-07-23)

550 

411## July 13–17, 2026551## July 13–17, 2026

412 552 

413### Keep Work conversations and Projects together on desktop553### Keep Work conversations and Projects together on desktop


439stick, and a dial can trigger common actions or skills, start push-to-talk, and579stick, and a dial can trigger common actions or skills, start push-to-talk, and

440adjust reasoning effort without leaving the keyboard.580adjust reasoning effort without leaving the keyboard.

441 581 

582 

583 

584[Watch: Introducing the Codex Micro](https://www.youtube.com/watch?v=m8uUUUsMD3Y)

585 

442### Use GPT-5.6 through Amazon Bedrock586### Use GPT-5.6 through Amazon Bedrock

443 587 

444GPT-5.6 Sol, Terra, and Luna reached general availability through Amazon588GPT-5.6 Sol, Terra, and Luna reached general availability through Amazon


480Create a launch brief from the attached research and campaign template. Show me the plan and flag missing information before you build the final document, then adapt the approved brief into assets for three markets.624Create a launch brief from the attached research and campaign template. Show me the plan and flag missing information before you build the final document, then adapt the approved brief into assets for three markets.

481```625```

482 626 

627 

628 

629[Watch: Meet ChatGPT Work](https://www.youtube.com/watch?v=yRc5HcGJ-Cs)

630 

483### Choose the right GPT-5.6 model631### Choose the right GPT-5.6 model

484 632 

485The [GPT-5.6 family](https://learn.chatgpt.com/docs/models#recommended-models) offers three recommended633The [GPT-5.6 family](https://learn.chatgpt.com/docs/models#recommended-models) offers three recommended


489is the fastest, lowest-cost option. The default **Power** setting uses Sol with637is the fastest, lowest-cost option. The default **Power** setting uses Sol with

490medium reasoning.638medium reasoning.

491 639 

640 

641 

642[Watch: Meet GPT-5.6](https://www.youtube.com/watch?v=-MPGU2a67Ls)

643 

492### Use Codex in the ChatGPT desktop app644### Use Codex in the ChatGPT desktop app

493 645 

494On July 9, the Codex app merged into the646On July 9, the Codex app merged into the


503the ChatGPT mobile app. The updated desktop app is available globally on every655the ChatGPT mobile app. The updated desktop app is available globally on every

504ChatGPT plan, including Free.656ChatGPT plan, including Free.

505 657 

658 

659 

660[Watch: Codex for Engineering teams](https://www.youtube.com/watch?v=Ga792ftrBu4)

661 

506## June 15–19, 2026662## June 15–19, 2026

507 663 

508### Turn demonstrated workflows into reusable skills664### Turn demonstrated workflows into reusable skills


513generated skill and replay it with new inputs. Initial availability excludes669generated skill and replay it with new inputs. Initial availability excludes

514the EEA, the United Kingdom, and Switzerland, and requires Computer Use.670the EEA, the United Kingdom, and Switzerland, and requires Computer Use.

515 671 

672 

673 

674[Watch: Record & Replay in Codex](https://www.youtube.com/watch?v=ZK3JhU73W18)

675 

516<a id="continue-a-task-on-another-host"></a>676<a id="continue-a-task-on-another-host"></a>

517 677 

518### Continue a chat on another host678### Continue a chat on another host


570Use @Browser to reproduce the slow checkout. Inspect the network timing and console errors, fix the cause, and verify the result.730Use @Browser to reproduce the slow checkout. Inspect the network timing and console errors, fix the cause, and verify the result.

571```731```

572 732 

733 

734 

735[Watch: Debug web apps with browser use in Codex](https://www.youtube.com/watch?v=bhgYFRZLyKI)

736 

573### Bring your setup to Codex737### Bring your setup to Codex

574 738 

575New migration flows can import supported setup from other coding agents during739New migration flows can import supported setup from other coding agents during


606Build a responsive launch dashboard from this project with Sites. Validate it at mobile and desktop sizes, then save a version for review. Do not deploy it until I approve the saved version.770Build a responsive launch dashboard from this project with Sites. Validate it at mobile and desktop sizes, then save a version for review. Do not deploy it until I approve the saved version.

607```771```

608 772 

773 

774 

775[Watch: Introducing Sites in Codex](https://www.youtube.com/watch?v=VRvC5smyzso)

776 

609### Use Codex with Amazon Bedrock777### Use Codex with Amazon Bedrock

610 778 

611You can [use Codex with Amazon Bedrock](https://learn.chatgpt.com/docs/amazon-bedrock) for local779You can [use Codex with Amazon Bedrock](https://learn.chatgpt.com/docs/amazon-bedrock) for local


617 785 

618[Read all June 2026 release notes](https://learn.chatgpt.com/docs/changelog#month-2026-06).786[Read all June 2026 release notes](https://learn.chatgpt.com/docs/changelog#month-2026-06).

619 787 

788 

789 

790> OpenAI models and Codex, now in your AWS workflows.

791 

792[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2061564710173224985) (2026-06-01)

793 

620## May 25–29, 2026794## May 25–29, 2026

621 795 

622### Use Windows apps and control Codex remotely796### Use Windows apps and control Codex remotely


646Read the [May 25 iOS](https://learn.chatgpt.com/docs/changelog#codex-2026-05-25-mobile) and820Read the [May 25 iOS](https://learn.chatgpt.com/docs/changelog#codex-2026-05-25-mobile) and

647[May 29 app](https://learn.chatgpt.com/docs/changelog#codex-2026-05-28-app) release notes.821[May 29 app](https://learn.chatgpt.com/docs/changelog#codex-2026-05-28-app) release notes.

648 822 

823 

824 

825[Watch: Windows Computer Use and mobile access for Codex](https://www.youtube.com/watch?v=MPIAB-8VmCo)

826 

649## May 18–22, 2026827## May 18–22, 2026

650 828 

651### Give Codex context from any Mac app with Appshots829### Give Codex context from any Mac app with Appshots


663Use this appshot as the visual reference. Match the selected screen in the app, then open a preview and compare spacing, typography, and color.841Use this appshot as the visual reference. Match the selected screen in the app, then open a preview and compare spacing, typography, and color.

664```842```

665 843 

844 

845 

846[Watch: Introducing Appshots in Codex](https://www.youtube.com/watch?v=QKYbGCvNpFo)

847 

666### Follow long-running goals848### Follow long-running goals

667 849 

668[Goal mode](https://learn.chatgpt.com/docs/prompting#goal-mode) left experimental status and is850[Goal mode](https://learn.chatgpt.com/docs/prompting#goal-mode) left experimental status and is


674 856 

675[Read the May 21 launch notes](https://learn.chatgpt.com/docs/changelog#codex-2026-05-21).857[Read the May 21 launch notes](https://learn.chatgpt.com/docs/changelog#codex-2026-05-21).

676 858 

859 

860 

861[Watch: Run long tasks in Codex using goals](https://www.youtube.com/watch?v=rgh0hMYPcd0)

862 

677## May 11–15, 2026863## May 11–15, 2026

678 864 

679### Continue desktop work from mobile865### Continue desktop work from mobile


684continue from your phone. See [Remote connections](https://learn.chatgpt.com/docs/remote-connections)870continue from your phone. See [Remote connections](https://learn.chatgpt.com/docs/remote-connections)

685to set up a host and pick up work from another device.871to set up a host and pick up work from another device.

686 872 

873 

874 

875> Now in preview: Codex in the ChatGPT mobile app.

876 

877[View @OpenAI on X](https://x.com/OpenAI/status/2055016850849993072) (2026-05-14)

878 

687### Automate trusted workflows879### Automate trusted workflows

688 880 

689Hooks reached general availability for running custom commands at key points in881Hooks reached general availability for running custom commands at key points in


694 886 

695[Read the May 14 launch notes](https://learn.chatgpt.com/docs/changelog#codex-2026-05-13-app).887[Read the May 14 launch notes](https://learn.chatgpt.com/docs/changelog#codex-2026-05-13-app).

696 888 

889 

890 

891> Codex is getting easier to automate and customize around your code.

892 

893[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2055032115964870838) (2026-05-14)

894 

697## May 4–8, 2026895## May 4–8, 2026

698 896 

699### Work across browser tabs with the Chrome extension897### Work across browser tabs with the Chrome extension


720[May 5 access-token](https://learn.chatgpt.com/docs/changelog#codex-2026-05-05), and918[May 5 access-token](https://learn.chatgpt.com/docs/changelog#codex-2026-05-05), and

721[Codex for Chrome](https://learn.chatgpt.com/docs/changelog#codex-2026-05-07) launch notes.919[Codex for Chrome](https://learn.chatgpt.com/docs/changelog#codex-2026-05-07) launch notes.

722 920 

921 

922 

923[Watch: Codex can now use Chrome directly on macOS and Windows](https://www.youtube.com/watch?v=b6Mxcv1pyBU)

924 

723## April 20–24, 2026925## April 20–24, 2026

724 926 

725### Use GPT-5.5 for complex work927### Use GPT-5.5 for complex work


728tasks, with strengths across implementation, debugging, testing, computer use,930tasks, with strengths across implementation, debugging, testing, computer use,

729research, and finished knowledge-work outputs.931research, and finished knowledge-work outputs.

730 932 

933 

934 

935[Watch: Introducing GPT-5.5](https://www.youtube.com/watch?v=blGtYq9mL18)

936 

731### Let Codex operate the browser and review approvals937### Let Codex operate the browser and review approvals

732 938 

733[Computer Use in the built-in browser](https://learn.chatgpt.com/docs/browser?surface=app#app-computer-use-in-the-browser)939[Computer Use in the built-in browser](https://learn.chatgpt.com/docs/browser?surface=app#app-computer-use-in-the-browser)


746 952 

747[Read the April 23 launch notes](https://learn.chatgpt.com/docs/changelog#codex-2026-04-23).953[Read the April 23 launch notes](https://learn.chatgpt.com/docs/changelog#codex-2026-04-23).

748 954 

955 

956 

957> With GPT-5.5, Codex now gets more of the job done across the browser, files, docs, and your computer.

958 

959[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2047381283358355706) (2026-04-23)

960 

749## April 13–17, 2026961## April 13–17, 2026

750 962 

751### Preview and operate work in one place963### Preview and operate work in one place


763 975 

764 976 

765 977 

978 

979 

980[Watch: Codex for (almost) everything](https://www.youtube.com/watch?v=Lm7-yFZ5fZQ)

981 

766<a id="start-with-a-task-and-keep-it-moving"></a>982<a id="start-with-a-task-and-keep-it-moving"></a>

767 983 

768### Start with a chat and keep it moving984### Start with a chat and keep it moving


775 991 

776[Read the April 16 Codex app release notes](https://learn.chatgpt.com/docs/changelog#codex-2026-04-16-app).992[Read the April 16 Codex app release notes](https://learn.chatgpt.com/docs/changelog#codex-2026-04-16-app).

777 993 

994 

995 

996> Automations can now run in the same thread, so Codex can pick up where it left off

997 

998[View @OpenAI on X](https://x.com/OpenAI/status/2044828148890812538) (2026-04-16)

999 

778## April 6–10, 20261000## April 6–10, 2026

779 1001 

780### Review and ship pull requests in the app1002### Review and ship pull requests in the app


801[plugins launch](https://learn.chatgpt.com/docs/changelog#codex-2026-03-25), and1023[plugins launch](https://learn.chatgpt.com/docs/changelog#codex-2026-03-25), and

802[Codex app](https://learn.chatgpt.com/docs/changelog#codex-2026-03-25-app) release notes.1024[Codex app](https://learn.chatgpt.com/docs/changelog#codex-2026-03-25-app) release notes.

803 1025 

1026 

1027 

1028> Plugins in Codex? We got you.

1029 

1030[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2037604273434018259) (2026-03-27)

1031 

804## March 16–20, 20261032## March 16–20, 2026

805 1033 

806### Branch earlier and choose tools from the composer1034### Branch earlier and choose tools from the composer


814[chat control](https://learn.chatgpt.com/docs/changelog#codex-2026-03-18-app), and1042[chat control](https://learn.chatgpt.com/docs/changelog#codex-2026-03-18-app), and

815[skill menu](https://learn.chatgpt.com/docs/changelog#codex-2026-03-19-app) release notes.1043[skill menu](https://learn.chatgpt.com/docs/changelog#codex-2026-03-19-app) release notes.

816 1044 

1045 

1046 

1047> GPT-5.4 mini is more than 2x faster than GPT-5 mini. Optimized for coding, computer use, multimodal understanding, and subagents.

1048 

1049[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2033953815834333608) (2026-03-17)

1050 

817## March 9–13, 20261051## March 9–13, 2026

818 1052 

819### Schedule work with the right environment1053### Schedule work with the right environment


831 1065 

832 1066 

833 1067 

1068 

1069 

1070> Automations are now GA.

1071 

1072[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2032222711032971548) (2026-03-12)

1073 

834### Let Codex inspect terminal output1074### Let Codex inspect terminal output

835 1075 

836Codex also learned to read the [integrated terminal](https://learn.chatgpt.com/docs/integrated-terminal#run-and-validate-your-project)1076Codex also learned to read the [integrated terminal](https://learn.chatgpt.com/docs/integrated-terminal#run-and-validate-your-project)


864 1104 

865 1105 

866 1106 

1107 

1108 

1109[Watch: The Codex app is now on Windows](https://www.youtube.com/watch?v=8hNcRChDrNk)

1110 

867<a id="move-tasks-between-local-and-worktree"></a>1111<a id="move-tasks-between-local-and-worktree"></a>

868 1112 

869### Move chats between Local and Worktree1113### Move chats between Local and Worktree


890[Codex app](https://learn.chatgpt.com/docs/changelog#codex-2026-02-12-app) release notes, or see the1134[Codex app](https://learn.chatgpt.com/docs/changelog#codex-2026-02-12-app) release notes, or see the

891current [model guide](https://learn.chatgpt.com/docs/models).1135current [model guide](https://learn.chatgpt.com/docs/models).

892 1136 

1137 

1138 

1139> Introducing GPT-5.3-Codex-Spark, our ultra-fast model purpose built for real-time coding.

1140 

1141[View @OpenAIDevs on X](https://x.com/OpenAIDevs/status/2022009906329739681) (2026-02-12)

1142 

893## February 2–6, 20261143## February 2–6, 2026

894 1144 

895### The Codex app launches on macOS1145### The Codex app launches on macOS


906 1156 

907 1157 

908 1158 

1159 

1160 

1161[Watch: Introducing the Codex app](https://www.youtube.com/watch?v=HFM3se4lNiw)

1162 

909### Steer active work and add files1163### Steer active work and add files

910 1164 

911Mid-turn steering made it possible to redirect Codex without stopping an1165Mid-turn steering made it possible to redirect Codex without stopping an