app-server.md +558 −63
3Codex app-server is the interface Codex uses to power rich clients (for example, the Codex VS Code extension). Use it when you want a deep integration inside your own product: authentication, conversation history, approvals, and streamed agent events. The app-server implementation is open source in the Codex GitHub repository ([openai/codex/codex-rs/app-server](https://github.com/openai/codex/tree/main/codex-rs/app-server)). See the [Open Source](https://developers.openai.com/codex/open-source) page for the full list of open-source Codex components.3Codex app-server is the interface Codex uses to power rich clients (for example, the Codex VS Code extension). Use it when you want a deep integration inside your own product: authentication, conversation history, approvals, and streamed agent events. The app-server implementation is open source in the Codex GitHub repository ([openai/codex/codex-rs/app-server](https://github.com/openai/codex/tree/main/codex-rs/app-server)). See the [Open Source](https://developers.openai.com/codex/open-source) page for the full list of open-source Codex components.
4 4
5If you are automating jobs or running Codex in CI, use the5If you are automating jobs or running Codex in CI, use the
66[Codex SDK](https://developers.openai.com/codex/sdk) instead. <a href="/codex/sdk">Codex SDK</a> instead.
7 7
8## Protocol8## Protocol
9 9
12Supported transports:12Supported transports:
13 13
14- `stdio` (`--listen stdio://`, default): newline-delimited JSON (JSONL).14- `stdio` (`--listen stdio://`, default): newline-delimited JSON (JSONL).
1515- `websocket` (`--listen ws://IP:PORT`, experimental): one JSON-RPC message per WebSocket text frame.- `websocket` (`--listen ws://IP:PORT`, experimental and unsupported): one JSON-RPC message per WebSocket text frame.
16- `off` (`--listen off`): don't expose a local transport.
17
18When you run with `--listen ws://IP:PORT`, the same listener also serves basic HTTP health probes:
19
20- `GET /readyz` returns `200 OK` once the listener accepts new connections.
21- `GET /healthz` returns `200 OK` when the request doesn't include an `Origin` header.
22- Requests with an `Origin` header are rejected with `403 Forbidden`.
23
24WebSocket transport is experimental and unsupported. Loopback listeners such as `ws://127.0.0.1:PORT` are appropriate for localhost and SSH port-forwarding workflows. Non-loopback WebSocket listeners currently allow unauthenticated connections by default during rollout, so configure WebSocket auth before exposing one remotely.
25
26Supported WebSocket auth flags:
27
28- `--ws-auth capability-token --ws-token-file /absolute/path`
29- `--ws-auth capability-token --ws-token-sha256 HEX`
30- `--ws-auth signed-bearer-token --ws-shared-secret-file /absolute/path`
31
32For signed bearer tokens, you can also set `--ws-issuer`, `--ws-audience`, and `--ws-max-clock-skew-seconds`. Clients present the credential as `Authorization: Bearer <token>` during the WebSocket handshake, and app-server enforces auth before JSON-RPC `initialize`.
33
34Prefer `--ws-token-file` over passing raw bearer tokens on the command line. Use `--ws-token-sha256` only when the client keeps the raw high-entropy token in a separate local secret store; the hash is only a verifier, and clients still need the original token.
16 35
17In WebSocket mode, app-server uses bounded queues. When request ingress is full, the server rejects new requests with JSON-RPC error code `-32001` and message `"Server overloaded; retry later."` Clients should retry with an exponentially increasing delay and jitter.36In WebSocket mode, app-server uses bounded queues. When request ingress is full, the server rejects new requests with JSON-RPC error code `-32001` and message `"Server overloaded; retry later."` Clients should retry with an exponentially increasing delay and jitter.
18 37
21Requests include `method`, `params`, and `id`:40Requests include `method`, `params`, and `id`:
22 41
23```json42```json
2443{ "method": "thread/start", "id": 10, "params": { "model": "gpt-5.1-codex" } }{ "method": "thread/start", "id": 10, "params": { "model": "gpt-5.4" } }
25```44```
26 45
27Responses echo the `id` with either `result` or `error`:46Responses echo the `id` with either `result` or `error`:
56Example (Node.js / TypeScript):75Example (Node.js / TypeScript):
57 76
58```ts77```ts
5978import { spawn } from "node:child_process";
6079import readline from "node:readline";
61 80
62const proc = spawn("codex", ["app-server"], {81const proc = spawn("codex", ["app-server"], {
63 stdio: ["pipe", "pipe", "inherit"],82 stdio: ["pipe", "pipe", "inherit"],
99 },118 },
100});119});
101send({ method: "initialized", params: {} });120send({ method: "initialized", params: {} });
102121send({ method: "thread/start", id: 1, params: { model: "gpt-5.1-codex" } });send({ method: "thread/start", id: 1, params: { model: "gpt-5.4" } });
103```122```
104 123
105## Core primitives124## Core primitives
116- **Start (or resume) a thread**: Call `thread/start` for a new conversation, `thread/resume` to continue an existing one, or `thread/fork` to branch history into a new thread id.135- **Start (or resume) a thread**: Call `thread/start` for a new conversation, `thread/resume` to continue an existing one, or `thread/fork` to branch history into a new thread id.
117- **Begin a turn**: Call `turn/start` with the target `threadId` and user input. Optional fields override model, personality, `cwd`, sandbox policy, and more.136- **Begin a turn**: Call `turn/start` with the target `threadId` and user input. Optional fields override model, personality, `cwd`, sandbox policy, and more.
118- **Steer an active turn**: Call `turn/steer` to append user input to the currently in-flight turn without creating a new turn.137- **Steer an active turn**: Call `turn/steer` to append user input to the currently in-flight turn without creating a new turn.
119138- **Stream events**: After `turn/start`, keep reading notifications on stdout: `item/started`, `item/completed`, `item/agentMessage/delta`, tool progress, and other updates.- **Stream events**: After `turn/start`, keep reading notifications on stdout: `thread/archived`, `thread/unarchived`, `item/started`, `item/completed`, `item/agentMessage/delta`, tool progress, and other updates.
120- **Finish the turn**: The server emits `turn/completed` with final status when the model finishes or after a `turn/interrupt` cancellation.139- **Finish the turn**: The server emits `turn/completed` with final status when the model finishes or after a `turn/interrupt` cancellation.
121 140
122## Initialization141## Initialization
123 142
124Clients must send a single `initialize` request per transport connection before invoking any other method on that connection, then acknowledge with an `initialized` notification. Requests sent before initialization receive a `Not initialized` error, and repeated `initialize` calls on the same connection return `Already initialized`.143Clients must send a single `initialize` request per transport connection before invoking any other method on that connection, then acknowledge with an `initialized` notification. Requests sent before initialization receive a `Not initialized` error, and repeated `initialize` calls on the same connection return `Already initialized`.
125 144
126145The server returns the user agent string it will present to upstream services. Set `clientInfo` to identify your integration.The server returns the user agent string it will present to upstream services plus `platformFamily` and `platformOs` values that describe the runtime target. Set `clientInfo` to identify your integration.
127 146
128`initialize.params.capabilities` also supports per-connection notification opt-out via `optOutNotificationMethods`, which is a list of exact method names to suppress for that connection. Matching is exact (no wildcards/prefixes). Unknown method names are accepted and ignored.147`initialize.params.capabilities` also supports per-connection notification opt-out via `optOutNotificationMethods`, which is a list of exact method names to suppress for that connection. Matching is exact (no wildcards/prefixes). Unknown method names are accepted and ignored.
129 148
159 },178 },
160 "capabilities": {179 "capabilities": {
161 "experimentalApi": true,180 "experimentalApi": true,
162181 "optOutNotificationMethods": [ "optOutNotificationMethods": ["thread/started", "item/agentMessage/delta"]
163 "codex/event/session_configured",
164 "item/agentMessage/delta"
165 ]
166 }182 }
167 }183 }
168}184}
201- `thread/start` - create a new thread; emits `thread/started` and automatically subscribes you to turn/item events for that thread.217- `thread/start` - create a new thread; emits `thread/started` and automatically subscribes you to turn/item events for that thread.
202- `thread/resume` - reopen an existing thread by id so later `turn/start` calls append to it.218- `thread/resume` - reopen an existing thread by id so later `turn/start` calls append to it.
203- `thread/fork` - fork a thread into a new thread id by copying stored history; emits `thread/started` for the new thread.219- `thread/fork` - fork a thread into a new thread id by copying stored history; emits `thread/started` for the new thread.
204220- `thread/read` - read a stored thread by id without resuming it; set `includeTurns` to return full turn history.- `thread/read` - read a stored thread by id without resuming it; set `includeTurns` to return full turn history. Returned `thread` objects include runtime `status`.
205221- `thread/list` - page through stored thread logs; supports cursor-based pagination plus `modelProviders`, `sourceKinds`, `archived`, and `cwd` filters.- `thread/list` - page through stored thread logs; supports cursor-based pagination plus `modelProviders`, `sourceKinds`, `archived`, `cwd`, and `searchTerm` filters. Returned `thread` objects include runtime `status`.
222- `thread/turns/list` - page through a stored thread's turn history without resuming it.
206- `thread/loaded/list` - list the thread ids currently loaded in memory.223- `thread/loaded/list` - list the thread ids currently loaded in memory.
207224- `thread/archive` - move a thread’s log file into the archived directory; returns `{}` on success.- `thread/name/set` - set or update a thread's user-facing name for a loaded thread or a persisted rollout; emits `thread/name/updated`.
208225- `thread/unarchive` - restore an archived thread rollout back into the active sessions directory; returns the restored `thread`.- `thread/goal/set` - set the goal for a loaded thread (experimental; requires `capabilities.experimentalApi`); emits `thread/goal/updated`.
226- `thread/goal/get` - read the current goal for a loaded thread (experimental; requires `capabilities.experimentalApi`).
227- `thread/goal/clear` - clear the goal for a loaded thread (experimental; requires `capabilities.experimentalApi`); emits `thread/goal/cleared`.
228- `thread/metadata/update` - patch SQLite-backed stored thread metadata; currently supports persisted `gitInfo`.
229- `thread/archive` - move a thread's log file into the archived directory; returns `{}` on success and emits `thread/archived`.
230- `thread/unsubscribe` - unsubscribe this connection from thread turn/item events. If this was the last subscriber, the server unloads the thread after a no-subscriber inactivity grace period and emits `thread/closed`.
231- `thread/unarchive` - restore an archived thread rollout back into the active sessions directory; returns the restored `thread` and emits `thread/unarchived`.
232- `thread/status/changed` - notification emitted when a loaded thread's runtime `status` changes.
209- `thread/compact/start` - trigger conversation history compaction for a thread; returns `{}` immediately while progress streams via `turn/*` and `item/*` notifications.233- `thread/compact/start` - trigger conversation history compaction for a thread; returns `{}` immediately while progress streams via `turn/*` and `item/*` notifications.
234- `thread/shellCommand` - run a user-initiated shell command against a thread. This runs outside the sandbox with full access and doesn't inherit the thread sandbox policy.
235- `thread/backgroundTerminals/clean` - stop all running background terminals for a thread (experimental; requires `capabilities.experimentalApi`).
210- `thread/rollback` - drop the last N turns from the in-memory context and persist a rollback marker; returns the updated `thread`.236- `thread/rollback` - drop the last N turns from the in-memory context and persist a rollback marker; returns the updated `thread`.
211- `turn/start` - add user input to a thread and begin Codex generation; responds with the initial `turn` and streams events. For `collaborationMode`, `settings.developer_instructions: null` means "use built-in instructions for the selected mode."237- `turn/start` - add user input to a thread and begin Codex generation; responds with the initial `turn` and streams events. For `collaborationMode`, `settings.developer_instructions: null` means "use built-in instructions for the selected mode."
238- `thread/inject_items` - append raw Responses API items to a loaded thread's model-visible history without starting a user turn.
212- `turn/steer` - append user input to the active in-flight turn for a thread; returns the accepted `turnId`.239- `turn/steer` - append user input to the active in-flight turn for a thread; returns the accepted `turnId`.
213- `turn/interrupt` - request cancellation of an in-flight turn; success is `{}` and the turn ends with `status: "interrupted"`.240- `turn/interrupt` - request cancellation of an in-flight turn; success is `{}` and the turn ends with `status: "interrupted"`.
214- `review/start` - kick off the Codex reviewer for a thread; emits `enteredReviewMode` and `exitedReviewMode` items.241- `review/start` - kick off the Codex reviewer for a thread; emits `enteredReviewMode` and `exitedReviewMode` items.
215- `command/exec` - run a single command under the server sandbox without starting a thread/turn.242- `command/exec` - run a single command under the server sandbox without starting a thread/turn.
243- `command/exec/write` - write `stdin` bytes to a running `command/exec` session or close `stdin`.
244- `command/exec/resize` - resize a running PTY-backed `command/exec` session.
245- `command/exec/terminate` - stop a running `command/exec` session.
246- `command/exec/outputDelta` (notify) - emitted for base64-encoded stdout/stderr chunks from a streaming `command/exec` session.
216- `model/list` - list available models (set `includeHidden: true` to include entries with `hidden: true`) with effort options, optional `upgrade`, and `inputModalities`.247- `model/list` - list available models (set `includeHidden: true` to include entries with `hidden: true`) with effort options, optional `upgrade`, and `inputModalities`.
248- `modelProvider/capabilities/read` - read provider capability bounds for model/provider combinations (experimental; requires `capabilities.experimentalApi`).
217- `experimentalFeature/list` - list feature flags with lifecycle stage metadata and cursor pagination.249- `experimentalFeature/list` - list feature flags with lifecycle stage metadata and cursor pagination.
250- `experimentalFeature/enablement/set` - patch in-memory runtime enablement for supported feature keys such as `apps` and `plugins`.
218- `collaborationMode/list` - list collaboration mode presets (experimental, no pagination).251- `collaborationMode/list` - list collaboration mode presets (experimental, no pagination).
219- `skills/list` - list skills for one or more `cwd` values (supports `forceReload` and optional `perCwdExtraUserRoots`).252- `skills/list` - list skills for one or more `cwd` values (supports `forceReload` and optional `perCwdExtraUserRoots`).
253- `skills/changed` (notify) - emitted when watched local skill files change.
254- `marketplace/add` - add a remote plugin marketplace and persist it into the user's marketplace config.
255- `marketplace/upgrade` - refresh a configured Git marketplace, or all configured Git marketplaces when you omit the marketplace name.
256- `plugin/list` - list discovered plugin marketplaces and plugin state, including install/auth policy metadata, marketplace load errors, featured plugin ids, and local, Git, or remote plugin source metadata.
257- `plugin/read` - read one plugin by marketplace path or remote marketplace name and plugin name, including bundled skills, apps, and MCP server names when those details are available.
258- `plugin/install` - install a plugin from a marketplace path or remote marketplace name.
259- `plugin/uninstall` - uninstall an installed plugin.
220- `app/list` - list available apps (connectors) with pagination plus accessibility/enabled metadata.260- `app/list` - list available apps (connectors) with pagination plus accessibility/enabled metadata.
221- `skills/config/write` - enable or disable skills by path.261- `skills/config/write` - enable or disable skills by path.
222- `mcpServer/oauth/login` - start an OAuth login for a configured MCP server; returns an authorization URL and emits `mcpServer/oauthLogin/completed` on completion.262- `mcpServer/oauth/login` - start an OAuth login for a configured MCP server; returns an authorization URL and emits `mcpServer/oauthLogin/completed` on completion.
223- `tool/requestUserInput` - prompt the user with 1-3 short questions for a tool call (experimental); questions can set `isOther` for a free-form option.263- `tool/requestUserInput` - prompt the user with 1-3 short questions for a tool call (experimental); questions can set `isOther` for a free-form option.
224- `config/mcpServer/reload` - reload MCP server configuration from disk and queue a refresh for loaded threads.264- `config/mcpServer/reload` - reload MCP server configuration from disk and queue a refresh for loaded threads.
225265- `mcpServerStatus/list` - list MCP servers, tools, resources, and auth status (cursor + limit pagination).- `mcpServerStatus/list` - list MCP servers, tools, resources, and auth status (cursor + limit pagination). Use `detail: "full"` for full data or `detail: "toolsAndAuthOnly"` to omit resources.
226266- `feedback/upload` - submit a feedback report (classification + optional reason/logs + conversation id).- `mcpServer/resource/read` - read a single MCP resource through an initialized MCP server.
267- `mcpServer/tool/call` - call a tool on a thread's configured MCP server.
268- `mcpServer/startupStatus/updated` (notify) - emitted when a configured MCP server's startup status changes for a loaded thread.
269- `windowsSandbox/setupStart` - start Windows sandbox setup for `elevated` or `unelevated` mode; returns quickly and later emits `windowsSandbox/setupCompleted`.
270- `feedback/upload` - submit a feedback report (classification + optional reason/logs + conversation id, plus optional `extraLogFiles` attachments).
227- `config/read` - fetch the effective configuration on disk after resolving configuration layering.271- `config/read` - fetch the effective configuration on disk after resolving configuration layering.
272- `externalAgentConfig/detect` - detect external-agent artifacts that can be migrated with `includeHome` and optional `cwds`; each detected item includes `cwd` (`null` for home).
273- `externalAgentConfig/import` - apply selected external-agent migration items by passing explicit `migrationItems` with `cwd` (`null` for home). Supported item types include config, skills, `AGENTS.md`, plugins, MCP server config, subagents, hooks, commands, and sessions; plugin imports emit `externalAgentConfig/import/completed`.
228- `config/value/write` - write a single configuration key/value to the user's `config.toml` on disk.274- `config/value/write` - write a single configuration key/value to the user's `config.toml` on disk.
229- `config/batchWrite` - apply configuration edits atomically to the user's `config.toml` on disk.275- `config/batchWrite` - apply configuration edits atomically to the user's `config.toml` on disk.
230276- `configRequirements/read` - fetch requirements from `requirements.toml` and/or MDM, including allow-lists and residency requirements (or `null` if you haven’t set any up).- `configRequirements/read` - fetch requirements from `requirements.toml` and/or MDM, including allow-lists, pinned `featureRequirements`, and residency/network requirements (or `null` if you haven't set any up).
277- `fs/readFile`, `fs/writeFile`, `fs/createDirectory`, `fs/getMetadata`, `fs/readDirectory`, `fs/remove`, `fs/copy`, `fs/watch`, `fs/unwatch`, and `fs/changed` (notify) - operate on absolute filesystem paths through the app-server v2 filesystem API.
278
279Plugin summaries include a `source` union. Local plugins return
280`{ "type": "local", "path": ... }`, Git-backed marketplace entries return
281`{ "type": "git", "url": ..., "path": ..., "refName": ..., "sha": ... }`,
282and remote catalog entries return `{ "type": "remote" }`. For remote-only
283catalog entries, `PluginMarketplaceEntry.path` can be `null`; pass
284`remoteMarketplaceName` instead of `marketplacePath` when reading or installing
285those plugins.
231 286
232## Models287## Models
233 288
239{ "method": "model/list", "id": 6, "params": { "limit": 20, "includeHidden": false } }294{ "method": "model/list", "id": 6, "params": { "limit": 20, "includeHidden": false } }
240{ "id": 6, "result": {295{ "id": 6, "result": {
241 "data": [{296 "data": [{
242297 "id": "gpt-5.2-codex", "id": "gpt-5.4",
243298 "model": "gpt-5.2-codex", "model": "gpt-5.4",
244299 "upgrade": "gpt-5.3-codex", "displayName": "GPT-5.4",
245 "displayName": "GPT-5.2 Codex",
246 "hidden": false,300 "hidden": false,
247 "defaultReasoningEffort": "medium",301 "defaultReasoningEffort": "medium",
248302 "reasoningEffort": [{ "supportedReasoningEfforts": [{
249303 "effort": "low", "reasoningEffort": "low",
250 "description": "Lower latency"304 "description": "Lower latency"
251 }],305 }],
252 "inputModalities": ["text", "image"],306 "inputModalities": ["text", "image"],
259 313
260Each model entry can include:314Each model entry can include:
261 315
262316- `reasoningEffort` - supported effort options for the model.- `supportedReasoningEfforts` - supported effort options for the model.
263- `defaultReasoningEffort` - suggested default effort for clients.317- `defaultReasoningEffort` - suggested default effort for clients.
264- `upgrade` - optional recommended upgrade model id for migration prompts in clients.318- `upgrade` - optional recommended upgrade model id for migration prompts in clients.
319- `upgradeInfo` - optional upgrade metadata for migration prompts in clients.
265- `hidden` - whether the model is hidden from the default picker list.320- `hidden` - whether the model is hidden from the default picker list.
266- `inputModalities` - supported input types for the model (for example `text`, `image`).321- `inputModalities` - supported input types for the model (for example `text`, `image`).
267- `supportsPersonality` - whether the model supports personality-specific instructions such as `/personality`.322- `supportsPersonality` - whether the model supports personality-specific instructions such as `/personality`.
296## Threads351## Threads
297 352
298- `thread/read` reads a stored thread without subscribing to it; set `includeTurns` to include turns.353- `thread/read` reads a stored thread without subscribing to it; set `includeTurns` to include turns.
299354- `thread/list` supports cursor pagination plus `modelProviders`, `sourceKinds`, `archived`, and `cwd` filtering.- `thread/turns/list` pages through a stored thread's turn history without resuming it.
355- `thread/list` supports cursor pagination plus `modelProviders`, `sourceKinds`, `archived`, `cwd`, and `searchTerm` filtering.
300- `thread/loaded/list` returns the thread IDs currently in memory.356- `thread/loaded/list` returns the thread IDs currently in memory.
301- `thread/archive` moves the thread's persisted JSONL log into the archived directory.357- `thread/archive` moves the thread's persisted JSONL log into the archived directory.
358- `thread/metadata/update` patches stored thread metadata, currently including persisted `gitInfo`.
359- `thread/unsubscribe` unsubscribes the current connection from a loaded thread and can trigger `thread/closed` after an inactivity grace period.
302- `thread/unarchive` restores an archived thread rollout back into the active sessions directory.360- `thread/unarchive` restores an archived thread rollout back into the active sessions directory.
303- `thread/compact/start` triggers compaction and returns `{}` immediately.361- `thread/compact/start` triggers compaction and returns `{}` immediately.
304- `thread/rollback` drops the last N turns from the in-memory context and records a rollback marker in the thread's persisted JSONL log.362- `thread/rollback` drops the last N turns from the in-memory context and records a rollback marker in the thread's persisted JSONL log.
363- `thread/inject_items` appends raw Responses API items to a loaded thread's model-visible history without starting a user turn.
305 364
306### Start or resume a thread365### Start or resume a thread
307 366
309 368
310```json369```json
311{ "method": "thread/start", "id": 10, "params": {370{ "method": "thread/start", "id": 10, "params": {
312371 "model": "gpt-5.1-codex", "model": "gpt-5.4",
313 "cwd": "/Users/me/project",372 "cwd": "/Users/me/project",
314 "approvalPolicy": "never",373 "approvalPolicy": "never",
315 "sandbox": "workspaceWrite",374 "sandbox": "workspaceWrite",
316375 "personality": "friendly" "personality": "friendly",
376 "serviceName": "my_app_server_client"
317} }377} }
318{ "id": 10, "result": {378{ "id": 10, "result": {
319 "thread": {379 "thread": {
320 "id": "thr_123",380 "id": "thr_123",
321 "preview": "",381 "preview": "",
382 "ephemeral": false,
322 "modelProvider": "openai",383 "modelProvider": "openai",
323 "createdAt": 1730910000384 "createdAt": 1730910000
324 }385 }
326{ "method": "thread/started", "params": { "thread": { "id": "thr_123" } } }387{ "method": "thread/started", "params": { "thread": { "id": "thr_123" } } }
327```388```
328 389
390`serviceName` is optional. Set it when you want app-server to tag thread-level metrics with your integration's service name.
391
329To continue a stored session, call `thread/resume` with the `thread.id` you recorded earlier. The response shape matches `thread/start`. You can also pass the same configuration overrides supported by `thread/start`, such as `personality`:392To continue a stored session, call `thread/resume` with the `thread.id` you recorded earlier. The response shape matches `thread/start`. You can also pass the same configuration overrides supported by `thread/start`, such as `personality`:
330 393
331```json394```json
333 "threadId": "thr_123",396 "threadId": "thr_123",
334 "personality": "friendly"397 "personality": "friendly"
335} }398} }
336399{ "id": 11, "result": { "thread": { "id": "thr_123" } } }{ "id": 11, "result": { "thread": { "id": "thr_123", "name": "Bug bash notes", "ephemeral": false } } }
337```400```
338 401
339Resuming a thread doesn't update `thread.updatedAt` (or the rollout file's modified time) by itself. The timestamp updates when you start a turn.402Resuming a thread doesn't update `thread.updatedAt` (or the rollout file's modified time) by itself. The timestamp updates when you start a turn.
352{ "method": "thread/started", "params": { "thread": { "id": "thr_456" } } }415{ "method": "thread/started", "params": { "thread": { "id": "thr_456" } } }
353```416```
354 417
418When a user-facing thread title has been set, app-server hydrates `thread.name` on `thread/list`, `thread/read`, `thread/resume`, `thread/unarchive`, and `thread/rollback` responses. `thread/start` and `thread/fork` may omit `name` (or return `null`) until a title is set later.
419
355### Read a stored thread (without resuming)420### Read a stored thread (without resuming)
356 421
357Use `thread/read` when you want stored thread data but don't want to resume the thread or subscribe to its events.422Use `thread/read` when you want stored thread data but don't want to resume the thread or subscribe to its events.
358 423
359- `includeTurns` - when `true`, the response includes the thread's turns; when `false` or omitted, you get the thread summary only.424- `includeTurns` - when `true`, the response includes the thread's turns; when `false` or omitted, you get the thread summary only.
425- Returned `thread` objects include runtime `status` (`notLoaded`, `idle`, `systemError`, or `active` with `activeFlags`).
360 426
361```json427```json
362{ "method": "thread/read", "id": 19, "params": { "threadId": "thr_123", "includeTurns": true } }428{ "method": "thread/read", "id": 19, "params": { "threadId": "thr_123", "includeTurns": true } }
363429{ "id": 19, "result": { "thread": { "id": "thr_123", "turns": [] } } }{ "id": 19, "result": { "thread": { "id": "thr_123", "name": "Bug bash notes", "ephemeral": false, "status": { "type": "notLoaded" }, "turns": [] } } }
364```430```
365 431
366Unlike `thread/resume`, `thread/read` doesn't load the thread into memory or emit `thread/started`.432Unlike `thread/resume`, `thread/read` doesn't load the thread into memory or emit `thread/started`.
367 433
434### List thread turns
435
436Use `thread/turns/list` to page a stored thread's turn history without resuming it. Results default to newest-first so clients can fetch older turns with `nextCursor`. The response also includes `backwardsCursor`; pass it as `cursor` with `sortDirection: "asc"` to fetch turns newer than the first item from the earlier page.
437
438```json
439{ "method": "thread/turns/list", "id": 20, "params": {
440 "threadId": "thr_123",
441 "limit": 50,
442 "sortDirection": "desc"
443} }
444{ "id": 20, "result": {
445 "data": [],
446 "nextCursor": "older-turns-cursor-or-null",
447 "backwardsCursor": "newer-turns-cursor-or-null"
448} }
449```
450
368### List threads (with pagination & filters)451### List threads (with pagination & filters)
369 452
370`thread/list` lets you render a history UI. Results default to newest-first by `createdAt`. Filters apply before pagination. Pass any combination of:453`thread/list` lets you render a history UI. Results default to newest-first by `createdAt`. Filters apply before pagination. Pass any combination of:
376- `sourceKinds` - restrict results to specific thread sources. When omitted or `[]`, the server defaults to interactive sources only: `cli` and `vscode`.459- `sourceKinds` - restrict results to specific thread sources. When omitted or `[]`, the server defaults to interactive sources only: `cli` and `vscode`.
377- `archived` - when `true`, list archived threads only. When `false` or omitted, list non-archived threads (default).460- `archived` - when `true`, list archived threads only. When `false` or omitted, list non-archived threads (default).
378- `cwd` - restrict results to threads whose session current working directory exactly matches this path.461- `cwd` - restrict results to threads whose session current working directory exactly matches this path.
462- `searchTerm` - search stored thread summaries and metadata before pagination.
379 463
380`sourceKinds` accepts the following values:464`sourceKinds` accepts the following values:
381 465
400} }484} }
401{ "id": 20, "result": {485{ "id": 20, "result": {
402 "data": [486 "data": [
403487 { "id": "thr_a", "preview": "Create a TUI", "modelProvider": "openai", "createdAt": 1730831111, "updatedAt": 1730831111 }, { "id": "thr_a", "preview": "Create a TUI", "ephemeral": false, "modelProvider": "openai", "createdAt": 1730831111, "updatedAt": 1730831111, "name": "TUI prototype", "status": { "type": "notLoaded" } },
404488 { "id": "thr_b", "preview": "Fix tests", "modelProvider": "openai", "createdAt": 1730750000, "updatedAt": 1730750000 } { "id": "thr_b", "preview": "Fix tests", "ephemeral": true, "modelProvider": "openai", "createdAt": 1730750000, "updatedAt": 1730750000, "status": { "type": "notLoaded" } }
405 ],489 ],
406 "nextCursor": "opaque-token-or-null"490 "nextCursor": "opaque-token-or-null"
407} }491} }
409 493
410When `nextCursor` is `null`, you have reached the final page.494When `nextCursor` is `null`, you have reached the final page.
411 495
496### Update stored thread metadata
497
498Use `thread/metadata/update` to patch stored thread metadata without resuming the thread. Today this supports persisted `gitInfo`; omitted fields are left unchanged, and explicit `null` clears a stored value.
499
500```json
501{ "method": "thread/metadata/update", "id": 21, "params": {
502 "threadId": "thr_123",
503 "gitInfo": { "branch": "feature/sidebar-pr" }
504} }
505{ "id": 21, "result": {
506 "thread": {
507 "id": "thr_123",
508 "gitInfo": { "sha": null, "branch": "feature/sidebar-pr", "originUrl": null }
509 }
510} }
511```
512
513### Track thread status changes
514
515`thread/status/changed` is emitted whenever a loaded thread's runtime status changes. The payload includes `threadId` and the new `status`.
516
517```json
518{
519 "method": "thread/status/changed",
520 "params": {
521 "threadId": "thr_123",
522 "status": { "type": "active", "activeFlags": ["waitingOnApproval"] }
523 }
524}
525```
526
412### List loaded threads527### List loaded threads
413 528
414`thread/loaded/list` returns thread IDs currently loaded in memory.529`thread/loaded/list` returns thread IDs currently loaded in memory.
418{ "id": 21, "result": { "data": ["thr_123", "thr_456"] } }533{ "id": 21, "result": { "data": ["thr_123", "thr_456"] } }
419```534```
420 535
536### Unsubscribe from a loaded thread
537
538`thread/unsubscribe` removes the current connection's subscription to a thread. The response status is one of:
539
540- `unsubscribed` when the connection was subscribed and is now removed.
541- `notSubscribed` when the connection wasn't subscribed to that thread.
542- `notLoaded` when the thread isn't loaded.
543
544If this was the last subscriber, the server keeps the thread loaded until it has no subscribers and no thread activity for 30 minutes. When the grace period expires, app-server unloads the thread and emits a `thread/status/changed` transition to `notLoaded` plus `thread/closed`.
545
546```json
547{ "method": "thread/unsubscribe", "id": 22, "params": { "threadId": "thr_123" } }
548{ "id": 22, "result": { "status": "unsubscribed" } }
549```
550
551If the thread later expires:
552
553```json
554{ "method": "thread/status/changed", "params": {
555 "threadId": "thr_123",
556 "status": { "type": "notLoaded" }
557} }
558{ "method": "thread/closed", "params": { "threadId": "thr_123" } }
559```
560
421### Archive a thread561### Archive a thread
422 562
423Use `thread/archive` to move the persisted thread log (stored as a JSONL file on disk) into the archived sessions directory.563Use `thread/archive` to move the persisted thread log (stored as a JSONL file on disk) into the archived sessions directory.
425```json565```json
426{ "method": "thread/archive", "id": 22, "params": { "threadId": "thr_b" } }566{ "method": "thread/archive", "id": 22, "params": { "threadId": "thr_b" } }
427{ "id": 22, "result": {} }567{ "id": 22, "result": {} }
568{ "method": "thread/archived", "params": { "threadId": "thr_b" } }
428```569```
429 570
430Archived threads won't appear in future calls to `thread/list` unless you pass `archived: true`.571Archived threads won't appear in future calls to `thread/list` unless you pass `archived: true`.
435 576
436```json577```json
437{ "method": "thread/unarchive", "id": 24, "params": { "threadId": "thr_b" } }578{ "method": "thread/unarchive", "id": 24, "params": { "threadId": "thr_b" } }
438579{ "id": 24, "result": { "thread": { "id": "thr_b" } } }{ "id": 24, "result": { "thread": { "id": "thr_b", "name": "Bug bash notes" } } }
580{ "method": "thread/unarchived", "params": { "threadId": "thr_b" } }
439```581```
440 582
441### Trigger thread compaction583### Trigger thread compaction
449{ "id": 25, "result": {} }591{ "id": 25, "result": {} }
450```592```
451 593
594### Run a thread shell command
595
596Use `thread/shellCommand` for user-initiated shell commands that belong to a thread. The request returns immediately with `{}` while progress streams through standard `turn/*` and `item/*` notifications.
597
598This API runs outside the sandbox with full access and doesn't inherit the thread sandbox policy. Clients should expose it only for explicit user-initiated commands.
599
600If the thread already has an active turn, the command runs as an auxiliary action on that turn and its formatted output is injected into the turn's message stream. If the thread is idle, app-server starts a standalone turn for the shell command.
601
602```json
603{ "method": "thread/shellCommand", "id": 26, "params": { "threadId": "thr_b", "command": "git status --short" } }
604{ "id": 26, "result": {} }
605```
606
607### Clean background terminals
608
609Use `thread/backgroundTerminals/clean` to stop all running background terminals associated with a thread. This method is experimental and requires `capabilities.experimentalApi = true`.
610
611```json
612{ "method": "thread/backgroundTerminals/clean", "id": 27, "params": { "threadId": "thr_b" } }
613{ "id": 27, "result": {} }
614```
615
616### Roll back recent turns
617
618Use `thread/rollback` to remove the last `numTurns` entries from the in-memory context and persist a rollback marker in the rollout log. The returned `thread` includes `turns` populated after the rollback.
619
620```json
621{ "method": "thread/rollback", "id": 28, "params": { "threadId": "thr_b", "numTurns": 1 } }
622{ "id": 28, "result": { "thread": { "id": "thr_b", "name": "Bug bash notes", "ephemeral": false } } }
623```
624
452## Turns625## Turns
453 626
454The `input` field accepts a list of items:627The `input` field accepts a list of items:
478}651}
479```652```
480 653
654On macOS, `includePlatformDefaults: true` appends a curated platform-default Seatbelt policy for restricted-read sessions. This improves tool compatibility without broadly allowing all of `/System`.
655
481Examples:656Examples:
482 657
483```json658```json
510 "writableRoots": ["/Users/me/project"],685 "writableRoots": ["/Users/me/project"],
511 "networkAccess": true686 "networkAccess": true
512 },687 },
513688 "model": "gpt-5.1-codex", "model": "gpt-5.4",
514 "effort": "medium",689 "effort": "medium",
515 "summary": "concise",690 "summary": "concise",
516 "personality": "friendly",691 "personality": "friendly",
524{ "id": 30, "result": { "turn": { "id": "turn_456", "status": "inProgress", "items": [], "error": null } } }699{ "id": 30, "result": { "turn": { "id": "turn_456", "status": "inProgress", "items": [], "error": null } } }
525```700```
526 701
702### Inject items into a thread
703
704Use `thread/inject_items` to append prebuilt Responses API items to a loaded thread's prompt history without starting a user turn. These items are persisted to the rollout and included in subsequent model requests.
705
706```json
707{ "method": "thread/inject_items", "id": 31, "params": {
708 "threadId": "thr_123",
709 "items": [
710 {
711 "type": "message",
712 "role": "assistant",
713 "content": [{ "type": "output_text", "text": "Previously computed context." }]
714 }
715 ]
716} }
717{ "id": 31, "result": {} }
718```
719
527### Steer an active turn720### Steer an active turn
528 721
529Use `turn/steer` to append more user input to the active in-flight turn.722Use `turn/steer` to append more user input to the active in-flight turn.
653- The server rejects empty `command` arrays.846- The server rejects empty `command` arrays.
654- `sandboxPolicy` accepts the same shape used by `turn/start` (for example, `dangerFullAccess`, `readOnly`, `workspaceWrite`, `externalSandbox`).847- `sandboxPolicy` accepts the same shape used by `turn/start` (for example, `dangerFullAccess`, `readOnly`, `workspaceWrite`, `externalSandbox`).
655- When omitted, `timeoutMs` falls back to the server default.848- When omitted, `timeoutMs` falls back to the server default.
849- Set `tty: true` for PTY-backed sessions, and use `processId` when you plan to follow up with `command/exec/write`, `command/exec/resize`, or `command/exec/terminate`.
850- Set `streamStdoutStderr: true` to receive `command/exec/outputDelta` notifications while the command is running.
851
852### Read admin requirements (`configRequirements/read`)
853
854Use `configRequirements/read` to inspect the effective admin requirements loaded from `requirements.toml` and/or MDM.
855
856```json
857{ "method": "configRequirements/read", "id": 52, "params": {} }
858{ "id": 52, "result": {
859 "requirements": {
860 "allowedApprovalPolicies": ["onRequest", "unlessTrusted"],
861 "allowedSandboxModes": ["readOnly", "workspaceWrite"],
862 "featureRequirements": {
863 "personality": true,
864 "unified_exec": false
865 },
866 "network": {
867 "enabled": true,
868 "allowedDomains": ["api.openai.com"],
869 "allowUnixSockets": ["/tmp/example.sock"],
870 "dangerouslyAllowAllUnixSockets": false
871 }
872 }
873} }
874```
875
876`result.requirements` is `null` when no requirements are configured. See the docs on [`requirements.toml`](https://developers.openai.com/codex/config-reference#requirementstoml) for details on supported keys and values.
877
878### Windows sandbox setup (`windowsSandbox/setupStart`)
879
880Custom Windows clients can trigger sandbox setup asynchronously instead of blocking on startup checks.
881
882```json
883{ "method": "windowsSandbox/setupStart", "id": 53, "params": { "mode": "elevated" } }
884{ "id": 53, "result": { "started": true } }
885```
886
887App-server starts setup in the background and later emits a completion notification:
888
889```json
890{
891 "method": "windowsSandbox/setupCompleted",
892 "params": { "mode": "elevated", "success": true, "error": null }
893}
894```
895
896Modes:
897
898- `elevated` - run the elevated Windows sandbox setup path.
899- `unelevated` - run the legacy setup/preflight path.
900
901## Filesystem
902
903The v2 filesystem APIs operate on absolute paths. Use `fs/watch` when a client needs to invalidate UI state after a file or directory changes.
904
905```json
906{ "method": "fs/watch", "id": 54, "params": {
907 "watchId": "0195ec6b-1d6f-7c2e-8c7a-56f2c4a8b9d1",
908 "path": "/Users/me/project/.git/HEAD"
909} }
910{ "id": 54, "result": { "path": "/Users/me/project/.git/HEAD" } }
911{ "method": "fs/changed", "params": {
912 "watchId": "0195ec6b-1d6f-7c2e-8c7a-56f2c4a8b9d1",
913 "changedPaths": ["/Users/me/project/.git/HEAD"]
914} }
915{ "method": "fs/unwatch", "id": 55, "params": {
916 "watchId": "0195ec6b-1d6f-7c2e-8c7a-56f2c4a8b9d1"
917} }
918{ "id": 55, "result": {} }
919```
920
921Watching a file emits `fs/changed` for that file path, including updates delivered by replace or rename operations.
656 922
657## Events923## Events
658 924
659925Event notifications are the server-initiated stream for thread lifecycles, turn lifecycles, and the items within them. After you start or resume a thread, keep reading the active transport stream for `thread/started`, `turn/*`, and `item/*` notifications.Event notifications are the server-initiated stream for thread lifecycles, turn lifecycles, and the items within them. After you start or resume a thread, keep reading the active transport stream for `thread/started`, `thread/archived`, `thread/unarchived`, `thread/closed`, `thread/status/changed`, `turn/*`, `item/*`, and `serverRequest/resolved` notifications.
660 926
661### Notification opt-out927### Notification opt-out
662 928
664 930
665- Exact-match only: `item/agentMessage/delta` suppresses only that method.931- Exact-match only: `item/agentMessage/delta` suppresses only that method.
666- Unknown method names are ignored.932- Unknown method names are ignored.
667933- Applies to both legacy (`codex/event/*`) and v2 (`thread/*`, `turn/*`, `item/*`, etc.) notifications.- Applies to the current `thread/*`, `turn/*`, `item/*`, and related v2 notifications.
668- Doesn't apply to requests, responses, or errors.934- Doesn't apply to requests, responses, or errors.
669 935
670### Fuzzy file search events (experimental)936### Fuzzy file search events (experimental)
674- `fuzzyFileSearch/sessionUpdated` - `{ sessionId, query, files }` with the current matches for the active query.940- `fuzzyFileSearch/sessionUpdated` - `{ sessionId, query, files }` with the current matches for the active query.
675- `fuzzyFileSearch/sessionCompleted` - `{ sessionId }` once indexing and matching for that query completes.941- `fuzzyFileSearch/sessionCompleted` - `{ sessionId }` once indexing and matching for that query completes.
676 942
943### Windows sandbox setup events
944
945- `windowsSandbox/setupCompleted` - `{ mode, success, error }` emitted after a `windowsSandbox/setupStart` request finishes.
946
677### Turn events947### Turn events
678 948
679- `turn/started` - `{ turn }` with the turn id, empty `items`, and `status: "inProgress"`.949- `turn/started` - `{ turn }` with the turn id, empty `items`, and `status: "inProgress"`.
689`ThreadItem` is the tagged union carried in turn responses and `item/*` notifications. Common item types include:959`ThreadItem` is the tagged union carried in turn responses and `item/*` notifications. Common item types include:
690 960
691- `userMessage` - `{id, content}` where `content` is a list of user inputs (`text`, `image`, or `localImage`).961- `userMessage` - `{id, content}` where `content` is a list of user inputs (`text`, `image`, or `localImage`).
692962- `agentMessage` - `{id, text}` containing the accumulated agent reply.- `agentMessage` - `{id, text, phase?}` containing the accumulated agent reply. When present, `phase` uses Responses API wire values (`commentary`, `final_answer`).
693- `plan` - `{id, text}` containing proposed plan text in plan mode. Treat the final `plan` item from `item/completed` as authoritative.963- `plan` - `{id, text}` containing proposed plan text in plan mode. Treat the final `plan` item from `item/completed` as authoritative.
694- `reasoning` - `{id, summary, content}` where `summary` holds streamed reasoning summaries and `content` holds raw reasoning blocks.964- `reasoning` - `{id, summary, content}` where `summary` holds streamed reasoning summaries and `content` holds raw reasoning blocks.
695- `commandExecution` - `{id, command, cwd, status, commandActions, aggregatedOutput?, exitCode?, durationMs?}`.965- `commandExecution` - `{id, command, cwd, status, commandActions, aggregatedOutput?, exitCode?, durationMs?}`.
696- `fileChange` - `{id, changes, status}` describing proposed edits; `changes` list `{path, kind, diff}`.966- `fileChange` - `{id, changes, status}` describing proposed edits; `changes` list `{path, kind, diff}`.
697- `mcpToolCall` - `{id, server, tool, status, arguments, result?, error?}`.967- `mcpToolCall` - `{id, server, tool, status, arguments, result?, error?}`.
968- `dynamicToolCall` - `{id, tool, arguments, status, contentItems?, success?, durationMs?}` for client-executed dynamic tool invocations.
698- `collabToolCall` - `{id, tool, status, senderThreadId, receiverThreadId?, newThreadId?, prompt?, agentStatus?}`.969- `collabToolCall` - `{id, tool, status, senderThreadId, receiverThreadId?, newThreadId?, prompt?, agentStatus?}`.
699- `webSearch` - `{id, query, action?}` for web search requests issued by the agent.970- `webSearch` - `{id, query, action?}` for web search requests issued by the agent.
700- `imageView` - `{id, path}` emitted when the agent invokes the image viewer tool.971- `imageView` - `{id, path}` emitted when the agent invokes the image viewer tool.
751Order of messages:1023Order of messages:
752 1024
7531. `item/started` shows the pending `commandExecution` item with `command`, `cwd`, and other fields.10251. `item/started` shows the pending `commandExecution` item with `command`, `cwd`, and other fields.
75410262. `item/commandExecution/requestApproval` includes `itemId`, `threadId`, `turnId`, optional `reason`, optional `command`, optional `cwd`, optional `commandActions`, and optional `proposedExecpolicyAmendment`.2. `item/commandExecution/requestApproval` includes `itemId`, `threadId`, `turnId`, optional `reason`, optional `command`, optional `cwd`, optional `commandActions`, optional `proposedExecpolicyAmendment`, optional `networkApprovalContext`, and optional `availableDecisions`. When `initialize.params.capabilities.experimentalApi = true`, the payload can also include experimental `additionalPermissions` describing requested per-command sandbox access. Any filesystem paths inside `additionalPermissions` are absolute on the wire.
7553. Client responds with one of the command execution approval decisions above.10273. Client responds with one of the command execution approval decisions above.
75610284. `item/completed` returns the final `commandExecution` item with `status: completed | failed | declined`.4. `serverRequest/resolved` confirms that the pending request has been answered or cleared.
10295. `item/completed` returns the final `commandExecution` item with `status: completed | failed | declined`.
1030
1031When `networkApprovalContext` is present, the prompt is for managed network access (not a general shell-command approval). The current v2 schema exposes the target `host` and `protocol`; clients should render a network-specific prompt and not rely on `command` being a user-meaningful shell command preview.
1032
1033Codex groups concurrent network approval prompts by destination (`host`, protocol, and port). The app-server may therefore send one prompt that unblocks multiple queued requests to the same destination, while different ports on the same host are treated separately.
757 1034
758### File change approvals1035### File change approvals
759 1036
7621. `item/started` emits a `fileChange` item with proposed `changes` and `status: "inProgress"`.10391. `item/started` emits a `fileChange` item with proposed `changes` and `status: "inProgress"`.
7632. `item/fileChange/requestApproval` includes `itemId`, `threadId`, `turnId`, optional `reason`, and optional `grantRoot`.10402. `item/fileChange/requestApproval` includes `itemId`, `threadId`, `turnId`, optional `reason`, and optional `grantRoot`.
7643. Client responds with one of the file change approval decisions above.10413. Client responds with one of the file change approval decisions above.
76510424. `item/completed` returns the final `fileChange` item with `status: completed | failed | declined`.4. `serverRequest/resolved` confirms that the pending request has been answered or cleared.
10435. `item/completed` returns the final `fileChange` item with `status: completed | failed | declined`.
1044
1045### `tool/requestUserInput`
1046
1047When the client responds to `item/tool/requestUserInput`, app-server emits `serverRequest/resolved` with `{ threadId, requestId }`. If the pending request is cleared by turn start, turn completion, or turn interruption before the client answers, the server emits the same notification for that cleanup.
1048
1049### Dynamic tool calls (experimental)
1050
1051`dynamicTools` on `thread/start` and the corresponding `item/tool/call` request or response flow are experimental APIs.
1052
1053When a dynamic tool is invoked during a turn, app-server emits:
1054
10551. `item/started` with `item.type = "dynamicToolCall"`, `status = "inProgress"`, plus `tool` and `arguments`.
10562. `item/tool/call` as a server request to the client.
10573. The client response payload with returned content items.
10584. `item/completed` with `item.type = "dynamicToolCall"`, the final `status`, and any returned `contentItems` or `success` value.
766 1059
767### MCP tool-call approvals (apps)1060### MCP tool-call approvals (apps)
768 1061
7691062App (connector) tool calls can also require approval. When an app tool call has side effects, the server may elicit approval with `tool/requestUserInput` and options such as **Accept**, **Decline**, and **Cancel**. If the user declines or cancels, the related `mcpToolCall` item completes with an error instead of running the tool.App (connector) tool calls can also require approval. When an app tool call has side effects, the server may elicit approval with `tool/requestUserInput` and options such as **Accept**, **Decline**, and **Cancel**. Destructive tool annotations always trigger approval even when the tool also advertises less-privileged hints. If the user declines or cancels, the related `mcpToolCall` item completes with an error instead of running the tool.
770 1063
771## Skills1064## Skills
772 1065
848} }1141} }
849```1142```
850 1143
1144The server also emits `skills/changed` notifications when watched local skill files change. Treat this as an invalidation signal and rerun `skills/list` with your current params when needed.
1145
851To enable or disable a skill by path:1146To enable or disable a skill by path:
852 1147
853```json1148```json
863 1158
864## Apps (connectors)1159## Apps (connectors)
865 1160
8661161Use `app/list` to fetch available apps. In the CLI/TUI, `/apps` is the user-facing picker; in custom clients, call `app/list` directly. Each entry includes both `isAccessible` (available to the user) and `isEnabled` (enabled in `config.toml`) so clients can distinguish install/access from local enabled state.Use `app/list` to fetch available apps. In the CLI/TUI, `/apps` is the user-facing picker; in custom clients, call `app/list` directly. Each entry includes both `isAccessible` (available to the user) and `isEnabled` (enabled in `config.toml`) so clients can distinguish install/access from local enabled state. App entries can also include optional `branding`, `appMetadata`, and `labels` fields.
867 1162
868```json1163```json
869{ "method": "app/list", "id": 50, "params": {1164{ "method": "app/list", "id": 50, "params": {
879 "name": "Demo App",1174 "name": "Demo App",
880 "description": "Example connector for documentation.",1175 "description": "Example connector for documentation.",
881 "logoUrl": "https://example.com/demo-app.png",1176 "logoUrl": "https://example.com/demo-app.png",
1177 "logoUrlDark": null,
1178 "distributionChannel": null,
1179 "branding": null,
1180 "appMetadata": null,
1181 "labels": null,
882 "installUrl": "https://chatgpt.com/apps/demo-app/demo-app",1182 "installUrl": "https://chatgpt.com/apps/demo-app/demo-app",
883 "isAccessible": true,1183 "isAccessible": true,
884 "isEnabled": true1184 "isEnabled": true
904 "name": "Demo App",1204 "name": "Demo App",
905 "description": "Example connector for documentation.",1205 "description": "Example connector for documentation.",
906 "logoUrl": "https://example.com/demo-app.png",1206 "logoUrl": "https://example.com/demo-app.png",
1207 "logoUrlDark": null,
1208 "distributionChannel": null,
1209 "branding": null,
1210 "appMetadata": null,
1211 "labels": null,
907 "installUrl": "https://chatgpt.com/apps/demo-app/demo-app",1212 "installUrl": "https://chatgpt.com/apps/demo-app/demo-app",
908 "isAccessible": true,1213 "isAccessible": true,
909 "isEnabled": true1214 "isEnabled": true
936}1241}
937```1242```
938 1243
1244### Config RPC examples for app settings
1245
1246Use `config/read`, `config/value/write`, and `config/batchWrite` to inspect or update app controls in `config.toml`.
1247
1248Read the effective app config shape (including `_default` and per-tool overrides):
1249
1250```json
1251{ "method": "config/read", "id": 60, "params": { "includeLayers": false } }
1252{ "id": 60, "result": {
1253 "config": {
1254 "apps": {
1255 "_default": {
1256 "enabled": true,
1257 "destructive_enabled": true,
1258 "open_world_enabled": true
1259 },
1260 "google_drive": {
1261 "enabled": true,
1262 "destructive_enabled": false,
1263 "default_tools_approval_mode": "prompt",
1264 "tools": {
1265 "files/delete": { "enabled": false, "approval_mode": "approve" }
1266 }
1267 }
1268 }
1269 }
1270} }
1271```
1272
1273Update a single app setting:
1274
1275```json
1276{
1277 "method": "config/value/write",
1278 "id": 61,
1279 "params": {
1280 "keyPath": "apps.google_drive.default_tools_approval_mode",
1281 "value": "prompt",
1282 "mergeStrategy": "replace"
1283 }
1284}
1285```
1286
1287Apply multiple app edits atomically:
1288
1289```json
1290{
1291 "method": "config/batchWrite",
1292 "id": 62,
1293 "params": {
1294 "edits": [
1295 {
1296 "keyPath": "apps._default.destructive_enabled",
1297 "value": false,
1298 "mergeStrategy": "upsert"
1299 },
1300 {
1301 "keyPath": "apps.google_drive.tools.files/delete.approval_mode",
1302 "value": "approve",
1303 "mergeStrategy": "upsert"
1304 }
1305 ]
1306 }
1307}
1308```
1309
1310### Detect and import external agent config
1311
1312Use `externalAgentConfig/detect` to discover external-agent artifacts that can be migrated, then pass the selected entries to `externalAgentConfig/import`.
1313
1314Detection example:
1315
1316```json
1317{ "method": "externalAgentConfig/detect", "id": 63, "params": {
1318 "includeHome": true,
1319 "cwds": ["/Users/me/project"]
1320} }
1321{ "id": 63, "result": {
1322 "items": [
1323 {
1324 "itemType": "AGENTS_MD",
1325 "description": "Import /Users/me/project/CLAUDE.md to /Users/me/project/AGENTS.md.",
1326 "cwd": "/Users/me/project"
1327 },
1328 {
1329 "itemType": "SKILLS",
1330 "description": "Copy skill folders from /Users/me/.claude/skills to /Users/me/.agents/skills.",
1331 "cwd": null
1332 }
1333 ]
1334} }
1335```
1336
1337Import example:
1338
1339```json
1340{ "method": "externalAgentConfig/import", "id": 64, "params": {
1341 "migrationItems": [
1342 {
1343 "itemType": "AGENTS_MD",
1344 "description": "Import /Users/me/project/CLAUDE.md to /Users/me/project/AGENTS.md.",
1345 "cwd": "/Users/me/project"
1346 }
1347 ]
1348} }
1349{ "id": 64, "result": {} }
1350```
1351
1352When a request includes plugin imports, the server emits `externalAgentConfig/import/completed` after the import finishes. This notification may arrive immediately after the response or after background remote imports complete.
1353
1354Supported `itemType` values are `AGENTS_MD`, `CONFIG`, `SKILLS`, `PLUGINS`,
1355and `MCP_SERVER_CONFIG`. For `PLUGINS` items, `details.plugins` lists each
1356`marketplaceName` and the `pluginNames` Codex can try to migrate. Detection
1357returns only items that still have work to do. For example, Codex skips AGENTS
1358migration when `AGENTS.md` already exists and is non-empty, and skill imports
1359don't overwrite existing skill directories.
1360
1361When detecting plugins from `.claude/settings.json`, Codex reads configured
1362marketplace sources from `extraKnownMarketplaces`. If `enabledPlugins` contains
1363plugins from `claude-plugins-official` but the marketplace source is missing,
1364Codex infers `anthropics/claude-plugins-official` as the source.
1365
939## Auth endpoints1366## Auth endpoints
940 1367
9411368The JSON-RPC auth/account surface exposes request/response methods plus server-initiated notifications (no `id`). Use these to determine auth state, start or cancel logins, logout, and inspect ChatGPT rate limits.The JSON-RPC auth/account surface exposes request/response methods plus server-initiated notifications (no `id`). Use these to determine auth state, start or cancel logins, logout, inspect ChatGPT rate limits, and notify workspace owners about depleted credits or usage limits.
942 1369
943### Authentication modes1370### Authentication modes
944 1371
9451372Codex supports three authentication modes. `account/updated.authMode` shows the active mode, and `account/read` also reports it.Codex supports these authentication modes. `account/updated.authMode` shows the active mode and includes the current ChatGPT `planType` when available. `account/read` also reports account and plan details.
946 1373
9471374- **API key (`apikey`)** - the caller supplies an OpenAI API key and Codex stores it for API requests.- **API key (`apikey`)** - the caller supplies an OpenAI API key with `type: "apiKey"`, and Codex stores it for API requests.
9481375- **ChatGPT managed (`chatgpt`)** - Codex owns the ChatGPT OAuth flow, persists tokens, and refreshes them automatically.- **ChatGPT managed (`chatgpt`)** - Codex owns the ChatGPT OAuth flow, persists tokens, and refreshes them automatically. Start with `type: "chatgpt"` for the browser flow or `type: "chatgptDeviceCode"` for the device-code flow.
9491376- **ChatGPT external tokens (`chatgptAuthTokens`)** - a host app supplies `idToken` and `accessToken` directly. Codex stores these tokens in memory, and the host app must refresh them when asked.- **ChatGPT external tokens (`chatgptAuthTokens`)** - experimental and intended for host apps that already own the user's ChatGPT auth lifecycle. The host app supplies an `accessToken`, `chatgptAccountId`, and optional `chatgptPlanType` directly, and must refresh the token when asked.
950 1377
951### API overview1378### API overview
952 1379
953- `account/read` - fetch current account info; optionally refresh tokens.1380- `account/read` - fetch current account info; optionally refresh tokens.
9541381- `account/login/start` - begin login (`apiKey`, `chatgpt`, or `chatgptAuthTokens`).- `account/login/start` - begin login (`apiKey`, `chatgpt`, `chatgptDeviceCode`, or experimental `chatgptAuthTokens`).
955- `account/login/completed` (notify) - emitted when a login attempt finishes (success or error).1382- `account/login/completed` (notify) - emitted when a login attempt finishes (success or error).
9561383- `account/login/cancel` - cancel a pending ChatGPT login by `loginId`.- `account/login/cancel` - cancel a pending managed ChatGPT login by `loginId`.
957- `account/logout` - sign out; triggers `account/updated`.1384- `account/logout` - sign out; triggers `account/updated`.
9581385- `account/updated` (notify) - emitted whenever auth mode changes (`authMode`: `apikey`, `chatgpt`, `chatgptAuthTokens`, or `null`).- `account/updated` (notify) - emitted whenever auth mode changes (`authMode`: `apikey`, `chatgpt`, `chatgptAuthTokens`, or `null`) and includes `planType` when available.
959- `account/chatgptAuthTokens/refresh` (server request) - request fresh externally managed ChatGPT tokens after an authorization error.1386- `account/chatgptAuthTokens/refresh` (server request) - request fresh externally managed ChatGPT tokens after an authorization error.
960- `account/rateLimits/read` - fetch ChatGPT rate limits.1387- `account/rateLimits/read` - fetch ChatGPT rate limits.
961- `account/rateLimits/updated` (notify) - emitted whenever a user's ChatGPT rate limits change.1388- `account/rateLimits/updated` (notify) - emitted whenever a user's ChatGPT rate limits change.
1389- `account/sendAddCreditsNudgeEmail` - ask ChatGPT to email a workspace owner about depleted credits or a reached usage limit.
962- `mcpServer/oauthLogin/completed` (notify) - emitted after a `mcpServer/oauth/login` flow finishes; payload includes `{ name, success, error? }`.1390- `mcpServer/oauthLogin/completed` (notify) - emitted after a `mcpServer/oauth/login` flow finishes; payload includes `{ name, success, error? }`.
1391- `mcpServer/startupStatus/updated` (notify) - emitted when a configured MCP server's startup status changes for a loaded thread; payload includes `{ name, status, error }`.
963 1392
964### 1) Check auth state1393### 1) Check auth state
965 1394
1031 ```1462 ```
1032 1463
1033 ```json1464 ```json
10341465 { "method": "account/updated", "params": { "authMode": "apikey" } } {
1466 "method": "account/updated",
1467 "params": { "authMode": "apikey", "planType": null }
1468 }
1035 ```1469 ```
1036 1470
1037### 3) Log in with ChatGPT (browser flow)1471### 3) Log in with ChatGPT (browser flow)
1063 ```1498 ```
1064 1499
1065 ```json1500 ```json
10661501 { "method": "account/updated", "params": { "authMode": "chatgpt" } } {
1502 "method": "account/updated",
1503 "params": { "authMode": "chatgpt", "planType": "plus" }
1504 }
1067 ```1505 ```
1068 1506
10691507### 3b) Log in with externally managed ChatGPT tokens (`chatgptAuthTokens`)### 3b) Log in with ChatGPT (device-code flow)
1070 1508
10711509Use this mode when a host application owns the user’s ChatGPT auth lifecycle and supplies tokens directly.Use this flow when your client owns the sign-in ceremony or when a browser callback is brittle.
1510
15111. Start:
1512
1513 ```json
1514 {
1515 "method": "account/login/start",
1516 "id": 4,
1517 "params": { "type": "chatgptDeviceCode" }
1518 }
1519 ```
1520
1521 ```json
1522 {
1523 "id": 4,
1524 "result": {
1525 "type": "chatgptDeviceCode",
1526 "loginId": "<uuid>",
1527 "verificationUrl": "https://auth.openai.com/codex/device",
1528 "userCode": "ABCD-1234"
1529 }
1530 }
1531 ```
1532
15332. Show `verificationUrl` and `userCode` to the user; the frontend owns the UX.
15343. Wait for notifications:
1535
1536 ```json
1537 {
1538 "method": "account/login/completed",
1539 "params": { "loginId": "<uuid>", "success": true, "error": null }
1540 }
1541 ```
1542
1543 ```json
1544 {
1545 "method": "account/updated",
1546 "params": { "authMode": "chatgpt", "planType": "plus" }
1547 }
1548 ```
1549
1550### 3c) Log in with externally managed ChatGPT tokens (`chatgptAuthTokens`)
1551
1552Use this experimental mode only when a host application owns the user's ChatGPT auth lifecycle and supplies tokens directly. Clients must set `capabilities.experimentalApi = true` during `initialize` before using this login type.
1072 1553
10731. Send:15541. Send:
1074 1555
1078 "id": 7,1559 "id": 7,
1079 "params": {1560 "params": {
1080 "type": "chatgptAuthTokens",1561 "type": "chatgptAuthTokens",
10811562 "idToken": "<jwt>", "accessToken": "<jwt>",
10821563 "accessToken": "<jwt>" "chatgptAccountId": "org-123",
1564 "chatgptPlanType": "business"
1083 }1565 }
1084 }1566 }
1085 ```1567 ```
1100 ```json1584 ```json
1101 {1585 {
1102 "method": "account/updated",1586 "method": "account/updated",
11031587 "params": { "authMode": "chatgptAuthTokens" } "params": { "authMode": "chatgptAuthTokens", "planType": "business" }
1104 }1588 }
1105 ```1589 ```
1106 1590
1112 "id": 8,1596 "id": 8,
1113 "params": { "reason": "unauthorized", "previousAccountId": "org-123" }1597 "params": { "reason": "unauthorized", "previousAccountId": "org-123" }
1114}1598}
11151599{ "id": 8, "result": { "idToken": "<jwt>", "accessToken": "<jwt>" } }{ "id": 8, "result": { "accessToken": "<jwt>", "chatgptAccountId": "org-123", "chatgptPlanType": "business" } }
1116```1600```
1117 1601
1118The server retries the original request after a successful refresh response. Requests time out after about 10 seconds.1602The server retries the original request after a successful refresh response. Requests time out after about 10 seconds.
1129```json1613```json
1130{ "method": "account/logout", "id": 5 }1614{ "method": "account/logout", "id": 5 }
1131{ "id": 5, "result": {} }1615{ "id": 5, "result": {} }
11321616{ "method": "account/updated", "params": { "authMode": null } }{ "method": "account/updated", "params": { "authMode": null, "planType": null } }
1133```1617```
1134 1618
1135### 6) Rate limits (ChatGPT)1619### 6) Rate limits (ChatGPT)
1141 "limitId": "codex",1625 "limitId": "codex",
1142 "limitName": null,1626 "limitName": null,
1143 "primary": { "usedPercent": 25, "windowDurationMins": 15, "resetsAt": 1730947200 },1627 "primary": { "usedPercent": 25, "windowDurationMins": 15, "resetsAt": 1730947200 },
11441628 "secondary": null "secondary": null,
1629 "rateLimitReachedType": null
1145 },1630 },
1146 "rateLimitsByLimitId": {1631 "rateLimitsByLimitId": {
1147 "codex": {1632 "codex": {
1148 "limitId": "codex",1633 "limitId": "codex",
1149 "limitName": null,1634 "limitName": null,
1150 "primary": { "usedPercent": 25, "windowDurationMins": 15, "resetsAt": 1730947200 },1635 "primary": { "usedPercent": 25, "windowDurationMins": 15, "resetsAt": 1730947200 },
11511636 "secondary": null "secondary": null,
1637 "rateLimitReachedType": null
1152 },1638 },
1153 "codex_other": {1639 "codex_other": {
1154 "limitId": "codex_other",1640 "limitId": "codex_other",
1155 "limitName": "codex_other",1641 "limitName": "codex_other",
1156 "primary": { "usedPercent": 42, "windowDurationMins": 60, "resetsAt": 1730950800 },1642 "primary": { "usedPercent": 42, "windowDurationMins": 60, "resetsAt": 1730950800 },
11571643 "secondary": null "secondary": null,
1644 "rateLimitReachedType": null
1158 }1645 }
1159 }1646 }
1160} }1647} }
1175- `usedPercent` is current usage within the quota window.1662- `usedPercent` is current usage within the quota window.
1176- `windowDurationMins` is the quota window length.1663- `windowDurationMins` is the quota window length.
1177- `resetsAt` is a Unix timestamp (seconds) for the next reset.1664- `resetsAt` is a Unix timestamp (seconds) for the next reset.
1665- `planType` is included when the backend returns the ChatGPT plan associated with a bucket.
1666- `credits` is included when the backend returns remaining workspace credit details.
1667- `rateLimitReachedType` identifies the backend-classified limit state when one has been reached.
1668
1669### 7) Notify a workspace owner about a limit
1670
1671Use `account/sendAddCreditsNudgeEmail` to ask ChatGPT to email a workspace owner when credits are depleted or a usage limit has been reached.
1672
1673```json
1674{ "method": "account/sendAddCreditsNudgeEmail", "id": 7, "params": { "creditType": "credits" } }
1675{ "id": 7, "result": { "status": "sent" } }
1676```
1677
1678Use `creditType: "credits"` when workspace credits are depleted, or `creditType: "usage_limit"` when the workspace usage limit has been reached. If the owner was already notified recently, the response status is `cooldown_active`.