SpyBara
Go Premium Account
2026
14 May 2026, 07:00
19 May 2026, 11:58 18 May 2026, 22:01 14 May 2026, 21:00 14 May 2026, 07:00 13 May 2026, 00:57 12 May 2026, 01:59 11 May 2026, 18:00 7 May 2026, 20:02 7 May 2026, 17:08 5 May 2026, 23:00 2 May 2026, 06:45 2 May 2026, 00:48 1 May 2026, 18:29 30 Apr 2026, 18:36 29 Apr 2026, 12:40 29 Apr 2026, 00:50 25 Apr 2026, 06:37 25 Apr 2026, 00:42 24 Apr 2026, 18:20 24 Apr 2026, 12:28 23 Apr 2026, 18:31 23 Apr 2026, 12:28 23 Apr 2026, 00:46 22 Apr 2026, 18:29 22 Apr 2026, 00:42 21 Apr 2026, 18:29 21 Apr 2026, 12:30 21 Apr 2026, 06:45 20 Apr 2026, 18:26 20 Apr 2026, 06:53 18 Apr 2026, 18:18 17 Apr 2026, 00:44 16 Apr 2026, 18:31 16 Apr 2026, 00:46 15 Apr 2026, 18:31 15 Apr 2026, 06:44 14 Apr 2026, 18:31 14 Apr 2026, 12:29 13 Apr 2026, 18:37 13 Apr 2026, 00:44 12 Apr 2026, 06:38 10 Apr 2026, 18:23 9 Apr 2026, 00:33 8 Apr 2026, 18:32 8 Apr 2026, 00:40 7 Apr 2026, 00:40 2 Apr 2026, 18:23 31 Mar 2026, 06:35 31 Mar 2026, 00:39 28 Mar 2026, 06:26 28 Mar 2026, 00:36 27 Mar 2026, 18:23 27 Mar 2026, 00:39 26 Mar 2026, 18:27 25 Mar 2026, 18:24 23 Mar 2026, 18:22 20 Mar 2026, 00:35 18 Mar 2026, 12:23 18 Mar 2026, 00:36 17 Mar 2026, 18:24 17 Mar 2026, 00:33 16 Mar 2026, 18:25 16 Mar 2026, 12:23 14 Mar 2026, 00:32 13 Mar 2026, 18:15 13 Mar 2026, 00:34 11 Mar 2026, 00:31 9 Mar 2026, 00:34 8 Mar 2026, 18:10 8 Mar 2026, 00:35 7 Mar 2026, 18:10 7 Mar 2026, 06:14 7 Mar 2026, 00:33 6 Mar 2026, 00:38 5 Mar 2026, 18:41 5 Mar 2026, 06:22 5 Mar 2026, 00:34 4 Mar 2026, 18:18 4 Mar 2026, 06:20 3 Mar 2026, 18:20 3 Mar 2026, 00:35 27 Feb 2026, 18:15 24 Feb 2026, 06:27 24 Feb 2026, 00:33 23 Feb 2026, 18:27 21 Feb 2026, 00:33 20 Feb 2026, 12:16 19 Feb 2026, 20:53 19 Feb 2026, 20:37
14 May 2026, 21:00
19 May 2026, 11:58 18 May 2026, 22:01 14 May 2026, 21:00 14 May 2026, 07:00 13 May 2026, 00:57 12 May 2026, 01:59 11 May 2026, 18:00 7 May 2026, 20:02 7 May 2026, 17:08 5 May 2026, 23:00 2 May 2026, 06:45 2 May 2026, 00:48 1 May 2026, 18:29 30 Apr 2026, 18:36 29 Apr 2026, 12:40 29 Apr 2026, 00:50 25 Apr 2026, 06:37 25 Apr 2026, 00:42 24 Apr 2026, 18:20 24 Apr 2026, 12:28 23 Apr 2026, 18:31 23 Apr 2026, 12:28 23 Apr 2026, 00:46 22 Apr 2026, 18:29 22 Apr 2026, 00:42 21 Apr 2026, 18:29 21 Apr 2026, 12:30 21 Apr 2026, 06:45 20 Apr 2026, 18:26 20 Apr 2026, 06:53 18 Apr 2026, 18:18 17 Apr 2026, 00:44 16 Apr 2026, 18:31 16 Apr 2026, 00:46 15 Apr 2026, 18:31 15 Apr 2026, 06:44 14 Apr 2026, 18:31 14 Apr 2026, 12:29 13 Apr 2026, 18:37 13 Apr 2026, 00:44 12 Apr 2026, 06:38 10 Apr 2026, 18:23 9 Apr 2026, 00:33 8 Apr 2026, 18:32 8 Apr 2026, 00:40 7 Apr 2026, 00:40 2 Apr 2026, 18:23 31 Mar 2026, 06:35 31 Mar 2026, 00:39 28 Mar 2026, 06:26 28 Mar 2026, 00:36 27 Mar 2026, 18:23 27 Mar 2026, 00:39 26 Mar 2026, 18:27 25 Mar 2026, 18:24 23 Mar 2026, 18:22 20 Mar 2026, 00:35 18 Mar 2026, 12:23 18 Mar 2026, 00:36 17 Mar 2026, 18:24 17 Mar 2026, 00:33 16 Mar 2026, 18:25 16 Mar 2026, 12:23 14 Mar 2026, 00:32 13 Mar 2026, 18:15 13 Mar 2026, 00:34 11 Mar 2026, 00:31 9 Mar 2026, 00:34 8 Mar 2026, 18:10 8 Mar 2026, 00:35 7 Mar 2026, 18:10 7 Mar 2026, 06:14 7 Mar 2026, 00:33 6 Mar 2026, 00:38 5 Mar 2026, 18:41 5 Mar 2026, 06:22 5 Mar 2026, 00:34 4 Mar 2026, 18:18 4 Mar 2026, 06:20 3 Mar 2026, 18:20 3 Mar 2026, 00:35 27 Feb 2026, 18:15 24 Feb 2026, 06:27 24 Feb 2026, 00:33 23 Feb 2026, 18:27 21 Feb 2026, 00:33 20 Feb 2026, 12:16 19 Feb 2026, 20:53 19 Feb 2026, 20:37
Fri 1 18:29 Sat 2 00:48 Sat 2 06:45 Tue 5 23:00 Thu 7 17:08 Thu 7 20:02 Mon 11 18:00 Tue 12 01:59 Wed 13 00:57 Thu 14 07:00 Thu 14 21:00 Mon 18 22:01 Tue 19 11:58

app.md +8 −0

Details

139 139 

140Keep parallel code changes isolated with built-in Git worktree support.140Keep parallel code changes isolated with built-in Git worktree support.

141 141 

142 </BentoContent>

143 <BentoContent href="/codex/remote-connections">

144 

145### Remote connections

146 

147Use the ChatGPT mobile app to start, steer, approve, and review Codex work on a

148connected host.

149 

142 </BentoContent>150 </BentoContent>

143 <BentoContent href="/codex/app/computer-use">151 <BentoContent href="/codex/app/computer-use">

144 152 

auth.md +15 −1

Details

30available only when you sign in with ChatGPT. If you sign in with an API key,30available only when you sign in with ChatGPT. If you sign in with an API key,

31Codex uses standard API pricing instead.31Codex uses standard API pricing instead.

32 32 

33Recommendation is to use API key authentication for programmatic Codex CLI workflows (for example CI/CD jobs). Don't expose Codex execution in untrusted or public environments.33We recommend API key authentication for programmatic Codex CLI workflows, such

34as CI/CD jobs. Don't expose Codex execution in untrusted or public environments.

35 

36### Use Codex access tokens for enterprise automation

37 

38In ChatGPT Enterprise workspaces, admins can allow permitted members to create

39Codex access tokens for trusted, non-interactive Codex local workflows. Use an

40access token when automation needs ChatGPT workspace access, ChatGPT-managed

41Codex entitlements, or enterprise workspace controls without a browser sign-in.

42 

43Access tokens are intended for trusted scripts, schedulers, and private CI

44runners. For general OpenAI API calls, continue to use Platform API keys.

45 

46For setup steps, permissions, rotation, and revocation guidance, see

47[Access tokens](https://developers.openai.com/codex/enterprise/access-tokens).

34 48 

35## Secure your Codex cloud account49## Secure your Codex cloud account

36 50 

enterprise/access-tokens.md +144 −0 added

Details

1# Access tokens

2 

3Codex access tokens let trusted automation run Codex local with a ChatGPT workspace identity. Use them when a script, scheduled job, or CI runner needs repeatable, non-interactive Codex access.

4 

5Codex access tokens are currently supported for ChatGPT Business and

6 Enterprise workspaces.

7 

8Access tokens are created in the ChatGPT admin console at [Access tokens](https://chatgpt.com/admin/access-tokens). They are tied to the ChatGPT user and workspace that create them, and Codex uses them as agent identities for programmatic local workflows.

9 

10If a Platform API key works for your automation, keep using API key auth. Use

11 Codex access tokens when the workflow specifically needs ChatGPT workspace

12 access, ChatGPT-managed Codex entitlements, or enterprise workspace controls.

13 

14## How access tokens work

15 

16Use an access token when Codex needs to run without a user completing a browser sign-in. The token represents the ChatGPT workspace user who created it, so runs can use that user's Codex access and appear in workspace governance data.

17 

18Codex checks the token when a run starts and ties the run to that workspace identity. Treat the token like any other automation secret: store it in a secret manager, keep it out of logs, and rotate it regularly.

19 

20Use access tokens for:

21 

22- `codex exec` jobs that run from trusted automation.

23- Local scripts that need repeatable, non-interactive Codex runs.

24- Enterprise workflows where usage should be associated with a ChatGPT workspace user instead of an API organization key.

25 

26Main risks to avoid:

27 

28- **Leaked secrets:** anyone with the token can start Codex runs as the token creator. Store tokens in a secret manager, keep them out of logs, and rotate them regularly.

29- **Untrusted runners:** public CI, forked pull requests, or shared machines can expose tokens to people outside your workspace. Use access tokens only on trusted runners.

30- **Shared identities:** one person's token reused across unrelated teams makes ownership and audit trails harder to interpret. Create tokens for a specific workflow owner.

31- **Stale credentials:** long-lived tokens can remain active after the workflow changes. Prefer finite expirations and revoke tokens that are no longer used.

32- **Wrong credential type:** access tokens are for Codex local workflows. Use Platform API keys for general OpenAI API calls.

33 

34## Enable access token creation

35 

36Use the Codex Local controls in workspace settings to turn on access token creation for allowed members.

37 

38<CodexScreenshot

39 alt="Access token access permission in ChatGPT workspace RBAC settings"

40 lightSrc="/images/codex/enterprise/rbac_access_token_access_permission.png"

41 darkSrc="/images/codex/enterprise/rbac_access_token_access_permission_dark.png"

42 maxWidth={847}

43 variant="no-wallpaper"

44/>

45 

461. Go to [Workspace Settings > Settings and Permissions](https://chatgpt.com/admin/settings).

472. In the Codex Local section, make sure **Allow members to use Codex Local** is turned on.

483. Turn on **Allow members to use Codex access tokens** if all allowed members should be able to create access tokens.

494. If you use custom roles for a narrower rollout, assign the access token permission only to groups that need to create tokens.

50 

51Keep access token creation limited to people or service owners who understand where the token will be stored, which automation will use it, and how it will be rotated.

52 

53## Create an access token

54 

55Use the Access tokens page to name the token and choose when it expires.

56 

571. Go to [Access tokens](https://chatgpt.com/admin/access-tokens).

582. Select **Create**.

59 

60<CodexScreenshot

61 alt="Access tokens page with the Create button"

62 lightSrc="/images/codex/enterprise/access_token_create_header.png"

63 darkSrc="/images/codex/enterprise/access_token_create_header_dark.png"

64 maxWidth={942}

65 variant="no-wallpaper"

66/>

67 

683. Enter a descriptive name, such as `release-ci` or `nightly-docs-check`.

69 

70<CodexScreenshot

71 alt="Create access token modal with fields for name and expiration"

72 lightSrc="/images/codex/enterprise/access_token_creation_modal.png"

73 darkSrc="/images/codex/enterprise/access_token_creation_modal_dark.png"

74 maxWidth={544}

75 variant="no-wallpaper"

76/>

77 

784. Choose an expiration. Prefer a finite expiration such as 7, 30, 60, or 90 days. If you choose **No expiration**, rotate the token on a regular schedule.

795. Select **Create**.

806. Copy the generated access token immediately. You cannot view it again after you close the modal.

817. Store the token in your secret manager or CI secret store.

82 

83The shortest custom expiration is one day. Revoked and expired tokens cannot be used to start new Codex runs.

84 

85## Use an access token with Codex CLI

86 

87For ephemeral automation, store the token in `CODEX_ACCESS_TOKEN` and run Codex normally:

88 

89```bash

90export CODEX_ACCESS_TOKEN="<access-token>"

91codex exec --json "review this repository and summarize the top risks"

92```

93 

94For a persistent local login, pipe the token to `codex login --with-access-token`:

95 

96```bash

97printf '%s' "$CODEX_ACCESS_TOKEN" | codex login --with-access-token

98codex exec "summarize the last release diff"

99```

100 

101`codex login --with-access-token` stores an agent identity credential in Codex auth storage. If you prefer not to persist credentials on the machine, use the `CODEX_ACCESS_TOKEN` environment variable instead.

102 

103## Rotate or revoke a token

104 

105Rotate access tokens the same way you rotate other automation secrets:

106 

1071. Create a replacement token.

1082. Update the secret in the runner, scheduler, or secret manager.

1093. Run a smoke test with the new token.

1104. Revoke the old token from [Access tokens](https://chatgpt.com/admin/access-tokens).

111 

112From the Access tokens page, workspace owners and admins can revoke any workspace token. Members with access token permission can revoke only the tokens they created.

113 

114## Permission model

115 

116Access token permissions are separate from the general Codex local permission. A member can have access to the Codex app, CLI, or IDE extension without being allowed to create access tokens.

117 

118| Capability | Workspace owners and admins | Member with access token permission | Member without access token permission |

119| ------------------------------------------------------------- | ---------------------------------------------------- | --------------------------------------------- | -------------------------------------- |

120| Open [Access tokens](https://chatgpt.com/admin/access-tokens) | Yes | Yes | No |

121| Create access tokens | Yes, for their own ChatGPT workspace identity | Yes, for their own ChatGPT workspace identity | No |

122| List access tokens | Workspace list, including who created each token | Only tokens they created | No |

123| Revoke access tokens from the Access tokens page | Any token in the workspace | Only tokens they created | No page access |

124| Grant or remove access token permission | Yes | No | No |

125| Manage other Codex enterprise settings | Yes, based on admin role and Codex admin permissions | No, unless separately granted | No |

126 

127In short: workspace owners and admins manage access at the workspace level. Members need the access token permission to create and manage their own tokens, but the permission does not grant admin rights or access to other members' tokens.

128 

129## Troubleshooting

130 

131### The access tokens page returns 404 or forbidden

132 

133Ask a workspace owner or admin to confirm that Codex access tokens are enabled and that your role includes the access token permission.

134 

135### `codex login --with-access-token` fails

136 

137Confirm that you copied the generated access token, not a browser session token or Platform API key. Also confirm that the token has not expired or been revoked.

138 

139## Related docs

140 

141- [Authentication](https://developers.openai.com/codex/auth)

142- [Non-interactive mode](https://developers.openai.com/codex/noninteractive)

143- [Admin setup](https://developers.openai.com/codex/enterprise/admin-setup)

144- [Governance](https://developers.openai.com/codex/enterprise/governance)

Details

11 11 

12This guide is for ChatGPT Enterprise admins who want to set up Codex for their workspace.12This guide is for ChatGPT Enterprise admins who want to set up Codex for their workspace.

13 13 

14Use this page as the step-by-step rollout guide. For detailed policy, configuration, and monitoring details, use the linked pages: [Authentication](https://developers.openai.com/codex/auth), [Agent approvals & security](https://developers.openai.com/codex/agent-approvals-security), [Managed configuration](https://developers.openai.com/codex/enterprise/managed-configuration), and [Governance](https://developers.openai.com/codex/enterprise/governance).14Use this page as the step-by-step rollout guide. For detailed policy, configuration, automation, and monitoring details, use the linked pages: [Authentication](https://developers.openai.com/codex/auth), [Agent approvals & security](https://developers.openai.com/codex/agent-approvals-security), [Access tokens](https://developers.openai.com/codex/enterprise/access-tokens), [Managed configuration](https://developers.openai.com/codex/enterprise/managed-configuration), and [Governance](https://developers.openai.com/codex/enterprise/governance).

15 15 

16## Enterprise-grade security and privacy16## Enterprise-grade security and privacy

17 17 


59 59 

60This enables use of the Codex app, CLI, and IDE extension for allowed users.60This enables use of the Codex app, CLI, and IDE extension for allowed users.

61 61 

62If this toggle is off, users who attempt to use the Codex app, CLI, or IDE will see the following error: “403 - Unauthorized. Contact your ChatGPT administrator for access.62If members need programmatic Codex local workflows, also turn on **Allow members to use Codex access tokens** or grant the access token permission through a custom role. For setup and permission details, see [Access tokens](https://developers.openai.com/codex/enterprise/access-tokens).

63 

64If the Codex Local toggle is off, users who attempt to use the Codex app, CLI, or IDE will see the following error: “403 - Unauthorized. Contact your ChatGPT administrator for access.”

63 65 

64#### Enable device code authentication for Codex CLI66#### Enable device code authentication for Codex CLI

65 67 

Details

32- Product activity for threads and turns by client32- Product activity for threads and turns by client

33- User ranking table, with filters for client and sort options such as credits, threads, turns, text tokens, and current streak33- User ranking table, with filters for client and sort options such as credits, threads, turns, text tokens, and current streak

34- Code Review activity, including PRs reviewed, issues by priority, comments, replies, reactions, and feedback sentiment34- Code Review activity, including PRs reviewed, issues by priority, comments, replies, reactions, and feedback sentiment

35- Skill invocations and agent identity usage when your workspace has those features35- Skill invocations, agent identity usage, and access token usage when your workspace has those features

36 36 

37### Data export37### Data export

38 38 


115Use record metadata to answer questions like:115Use record metadata to answer questions like:

116 116 

117- Who ran a task117- Who ran a task

118- Who created or revoked an access token

118- When it ran119- When it ran

119- Which model was used120- Which model was used

120- How much content was processed121- How much content was processed

Details

1# Remote connections1# Remote connections

2 2 

3SSH remote connections are currently in alpha. To enable them today, set3import {

4 `remote_connections = true` in the `[features]` table in4 Desktop,

5 `~/.codex/config.toml`. Availability, setup flows, and supported environments5 Storage,

6 may change as the feature improves.6 Terminal,

7} from "@components/react/oai/platform/ui/Icon.react";

7 8 

8Remote connections let Codex work with projects that live on another9Remote connections let you use Codex when you are away from the machine that

9SSH-accessible machine. Use them when the codebase, credentials, services, or10runs it, or when your project lives on another machine. Connect the ChatGPT

10build environment you need are available on that host instead of your local11mobile app to a Codex App host, pick up work from another device, or configure

11machine.12Codex to work on an SSH host.

13 

14Remote access uses the connected host's projects, threads, files, credentials,

15permissions, plugins, Computer Use, browser setup, and local tools.

16 

17## What you can do remotely

18 

19- Start new threads in projects on the host, or continue existing ones.

20- Send follow-up instructions, answer questions, and steer active work.

21- Approve commands and other actions.

22- Review outputs, diffs, test results, terminal output, and screenshots.

23- Get notified when Codex completes a task or needs your attention.

24- Switch between connected hosts and threads.

25 

26The next sections cover using the ChatGPT mobile app to control a Codex App

27host. To connect Codex to a project on an SSH host, see

28[connect to an SSH host](#connect-to-an-ssh-host).

29 

30<div class="not-prose my-6 max-w-4xl rounded-xl bg-[url('/images/codex/codex-wallpaper-1.webp')] bg-cover bg-center p-4 md:p-8">

31 <CodexScreenshot

32 alt="Codex mobile setup screen alongside the ChatGPT mobile Codex project list"

33 lightSrc="/images/codex/app/mobile-setup-light.webp"

34 darkSrc="/images/codex/app/mobile-setup-dark.webp"

35 variant="no-wallpaper"

36 maxHeight="none"

37 maxWidth="420px"

38 />

39</div>

40 

41## Before you set up mobile access

42 

43Make sure you have:

44 

45- Codex access in the ChatGPT account and workspace you want to use.

46- The latest ChatGPT mobile app on an iOS or Android device. If you do not see

47 Codex in the app, update ChatGPT first.

48- A Mac host that is awake, online, running the Codex App, and signed in to the

49 same account and workspace. Mobile setup and device control currently require

50 the Codex App for macOS on the host; the setup flow isn't available from the

51 Codex CLI or IDE Extension.

52- Any required multi-factor authentication, SSO, or passkey configuration for

53 that account or workspace.

54 

55If you use Codex through a ChatGPT workspace, your admin may need to enable

56Remote Control access before you can connect from your phone.

57 

58## Set up mobile access

59 

60Start in the Codex App on the host you want to connect. The setup flow enables

61remote access for that host, then shows a QR code you can scan from your phone.

62 

63<WorkflowSteps variant="headings">

64 

651. Start Codex mobile setup.

66 

67 Open Codex on the host and select **Set up Codex mobile** in the

68 sidebar.

69 

702. Scan the QR code.

71 

72 Use your phone to scan the QR code shown by Codex. The code opens ChatGPT so

73 you can finish connecting the mobile app to the host.

74 

753. Finish setup in ChatGPT.

76 

77 ChatGPT opens the Codex mobile setup flow. Confirm the same ChatGPT account

78 and workspace, then complete any required multi-factor authentication, SSO,

79 or passkey steps. After setup succeeds, the host appears in Codex on your

80 phone.

81 

824. Review host settings.

83 

84 In Codex on the host, use **Settings > Connections** to manage connected

85 devices. You can also choose whether to keep the computer awake, enable

86 Computer Use, or install the Chrome extension.

87 

88</WorkflowSteps>

89 

90<div class="not-prose my-6 max-w-4xl">

91 <CodexScreenshot

92 alt="Connections settings showing devices that can control this Mac and remote access settings"

93 lightSrc="/images/codex/app/mobile-control-this-mac-framed-light.webp"

94 darkSrc="/images/codex/app/mobile-control-this-mac-framed-dark.webp"

95 maxHeight="480px"

96 class="p-3 sm:p-4"

97 imageClass="rounded-xl"

98 />

99</div>

100 

101## Choose what to connect

102 

103Start with the Mac laptop or desktop where you already use Codex. Add an

104always-on Mac or SSH host when you need continuous access or a different

105environment.

106 

107### <span class="not-prose inline-flex items-center gap-3 align-middle"><span class="inline-flex h-7 w-7 shrink-0 items-center justify-center rounded-md bg-surface-secondary text-secondary"><Desktop width={17} height={17} /></span><span>Your Mac laptop or desktop</span></span>

108 

109Connect the Mac where you already run Codex day to day. This gives remote access

110to the same projects, threads, credentials, plugins, and local setup you already

111use.

112 

113If that Mac sleeps, loses network access, or closes Codex, remote access stops

114until it is available again. If you use this computer as your host device, keep

115it plugged in and turn on **Keep this Mac awake** in the host's connection

116settings.

117 

118### <span class="not-prose inline-flex items-center gap-3 align-middle"><span class="inline-flex h-7 w-7 shrink-0 items-center justify-center rounded-md bg-surface-secondary text-secondary"><Storage width={17} height={17} /></span><span>A dedicated always-on Mac</span></span>

119 

120Use a dedicated always-on Mac when you want Codex to stay reachable for

121longer-running work.

122 

123Install the projects, credentials, plugins, MCP servers, and tools Codex should

124use on that machine.

125 

126### <span class="not-prose inline-flex items-center gap-3 align-middle"><span class="inline-flex h-7 w-7 shrink-0 items-center justify-center rounded-md bg-surface-secondary text-secondary"><Terminal width={17} height={17} /></span><span>A remote development environment</span></span>

127 

128Use an SSH host or managed devbox when the project already lives in a remote

129environment. Connect the Codex App host to that environment first; your phone

130still connects to the Codex App host, and Codex works in the remote environment

131with its dependencies, security policies, and compute resources.

132 

133For SSH setup details, see [connect to an SSH host](#connect-to-an-ssh-host).

134 

135## What comes from the connected host

136 

137Your phone sends prompts, approvals, and follow-up messages to Codex. The

138connected host provides the environment Codex uses.

139 

140That means:

141 

142- Repository files and local documents come from the connected host.

143- Shell commands run on that host or remote environment.

144- Any plugin installed on that host is available when you use Codex remotely.

145- MCP servers, skills, browser access, and Computer Use come from that host's

146 configuration.

147- Signed-in websites and desktop apps are available only when the host can

148 access them.

149- Sandboxing, security controls, and action approvals still apply to the

150 connected session.

151 

152Codex uses a secure relay layer to keep trusted machines reachable across your

153authorized ChatGPT devices without exposing them directly to the public

154internet.

155 

156## Pick up work from another device

157 

158You can also connect one Codex App host to another. For example, if your laptop

159is unavailable, you can start a thread from your phone on an always-on host,

160then later open Codex on your laptop and continue that thread from there.

161 

162In Codex on the laptop, use **Settings > Connections > Control other devices**

163to add the other host. A device can allow remote access and control another

164device at the same time.

165 

166<div class="not-prose my-6 max-w-4xl">

167 <CodexScreenshot

168 alt="Connections settings showing another device available under Control other devices"

169 lightSrc="/images/codex/app/mobile-control-other-devices-framed-light.webp"

170 darkSrc="/images/codex/app/mobile-control-other-devices-framed-dark.webp"

171 maxHeight="360px"

172 class="p-3 sm:p-4"

173 imageClass="rounded-xl"

174 />

175</div>

176 

177## Connect to an SSH host

178 

179In the Codex App, add remote projects from an SSH host and run threads against

180the remote filesystem and shell. Remote project threads run commands, read

181files, and write changes on the remote host.

12 182 

13Keep the remote host configured with the same security expectations you use for183Keep the remote host configured with the same security expectations you use for

14normal SSH access: trusted keys, least-privilege accounts, and no184normal SSH access: trusted keys, least-privilege accounts, and no

15unauthenticated public listeners.185unauthenticated public listeners.

16 186 

17## Codex app

18 

19In the Codex app, add remote projects from an SSH host and run threads against

20the remote filesystem and shell.

21 

22<WorkflowSteps variant="headings">187<WorkflowSteps variant="headings">

23 188 

241. Add the host to your SSH config so Codex can auto-discover it.1891. Add the host to your SSH config so Codex can auto-discover it.


33 Codex reads concrete host aliases from `~/.ssh/config`, resolves them with198 Codex reads concrete host aliases from `~/.ssh/config`, resolves them with

34 OpenSSH, and ignores pattern-only hosts.199 OpenSSH, and ignores pattern-only hosts.

35 200 

362. Confirm you can SSH to the host from the machine running the Codex app.2012. Confirm you can SSH to the host from the machine running the Codex App.

37 202 

38 ```bash203 ```bash

39 ssh devbox204 ssh devbox


45 user's login shell. Make sure the `codex` command is available on the210 user's login shell. Make sure the `codex` command is available on the

46 remote host's `PATH` in that shell.211 remote host's `PATH` in that shell.

47 212 

484. In the Codex app, open **Settings > Connections**, add or enable the SSH host,2134. In the Codex App, open **Settings > Connections**, add or enable the SSH

49 then choose a remote project folder.214 host, then choose a remote project folder.

50 215 

51</WorkflowSteps>216</WorkflowSteps>

52 217 


58remote_connections = true223remote_connections = true

59```224```

60 225 

61Remote project threads run commands, read files, and write changes on the

62remote host.

63 

64<CodexScreenshot226<CodexScreenshot

65 alt="Codex app settings showing SSH remote connections"227 alt="Codex app settings showing SSH remote connections"

66 lightSrc="/images/codex/app/remote-connections-light.webp"228 lightSrc="/images/codex/app/remote-connections-light.webp"

67 darkSrc="/images/codex/app/remote-connections-dark.webp"229 darkSrc="/images/codex/app/remote-connections-dark.webp"

68 maxHeight="420px"230 maxHeight="420px"

69 variant="no-wallpaper"231 class="p-3 sm:p-4"

232 imageClass="rounded-xl"

70/>233/>

71 234 

72## Authentication and network exposure235## Authentication and network exposure


78mesh networking tool such as Tailscale instead of exposing the app server241mesh networking tool such as Tailscale instead of exposing the app server

79directly to the internet.242directly to the internet.

80 243 

244## Troubleshooting

245 

246### You do not see the host on your phone

247 

248Confirm that the Codex App is running on the host, **Allow other devices to

249connect** is enabled, and the same ChatGPT account and workspace are selected on

250both devices.

251 

252### The approval request does not appear

253 

254Open the ChatGPT mobile app and go to Codex. Confirm that the phone and host use

255the same ChatGPT account and workspace, then scan the QR code again or restart

256setup from the host. If you use a ChatGPT workspace, ask your admin to confirm

257that Remote Control access is enabled.

258 

259### The remote session disconnects

260 

261Check whether the host went to sleep, lost network access, or closed Codex.

262Keep the host awake and connected while Codex works.

263 

264### Authentication blocks setup

265 

266Complete the account or workspace authentication prompt shown during setup. If

267your organization requires SSO, multi-factor authentication, or a passkey,

268finish that flow before trying again. If setup still fails, ask your workspace

269admin to confirm that Remote Control access is enabled.

270 

81## See also271## See also

82 272 

83- [Codex app settings](https://developers.openai.com/codex/app/settings)273- [Codex App](https://developers.openai.com/codex/app)

274- [Codex App features](https://developers.openai.com/codex/app/features)

275- [Codex App settings](https://developers.openai.com/codex/app/settings)

276- [Computer Use](https://developers.openai.com/codex/app/computer-use)

277- [Chrome extension](https://developers.openai.com/codex/app/chrome-extension)

84- [Command line options](https://developers.openai.com/codex/cli/reference)278- [Command line options](https://developers.openai.com/codex/cli/reference)

85- [Authentication](https://developers.openai.com/codex/auth)279- [Authentication](https://developers.openai.com/codex/auth)