| marp | true |
|---|---|
| theme | tessl-cheatsheet |
| paginate | false |
| size | 1400px 1200px |
| style | section { columns: 4; } |
brew install --cask codex
# or
curl -fsSL https://chatgpt.com/codex/install.sh | sh
# or (Node 22+)
npm install -g @openai/codex
codexAuth: browser sign-in (Plus/Pro/Business/Enterprise) or OPENAI_API_KEY. Headless: codex login --device-auth.
Two orthogonal controls, not one mode flag:
| Flag | Values |
|---|---|
-a / --ask-for-approval |
untrusted · on-request · never |
-s / --sandbox |
read-only · workspace-write · danger-full-access |
--full-auto = -a on-request -s workspace-write (network off).
--dangerously-bypass-approvals-and-sandbox (alias --yolo).
| Command | Description |
|---|---|
codex |
Start interactive session |
codex "prompt" |
Direct prompt |
codex exec "prompt" |
Non-interactive run (alias e) |
codex resume |
Resume a session |
codex apply |
Apply a cloud-task diff (alias a) |
codex login / logout |
Manage auth |
codex doctor |
Diagnose setup |
codex -m gpt-5-codex "task" |
Specify model |
Flags: -p profile, -c KEY=VALUE config override, -C cd, -i image, --search web search, --oss local Ollama.
Change behavior mid-session: /model, /approvals, /permissions.
| Key | Action |
|---|---|
Enter |
Send message |
Ctrl+C |
Cancel operation |
Esc |
Exit/cancel |
y / n |
Approve/reject |
Config: ~/.codex/config.toml (also .codex/config.toml per project).
model = "gpt-5-codex"
approval_policy = "on-request"
sandbox_mode = "workspace-write"
[sandbox_workspace_write]
network_access = falsePrecedence: CLI args > --profile > config.toml > defaults. Project memory: AGENTS.md.
GPT-5 / Codex family. Names change often — run /model for current options.
gpt-5-codexfamily — agentic coding- General GPT-5 tiers for reasoning/speed
OPENAI_API_KEY unlocks models deprecated for ChatGPT sign-in.
Codex as an MCP server (stdio JSON-RPC):
codex mcp-serverManage servers Codex connects to:
codex mcp add | list | get | remove | loginOr [mcp_servers.<name>] tables in config.toml.
codex exec "Run tests and fix failures" \
--full-auto- Commit before running Codex
- Use
-a untrustedor-s read-onlyfor caution - Review diffs before accepting
- Create feature branches
- Start read-only (
-s read-only) to learn - Use specific file paths in prompts
- Let Codex iterate on test failures
- Use
codex execfor CI/automation