Credential access
May access repository files, local configs, and credentials exposed to its runtime.
cask
Install codex with Homebrew Cask
OpenAI's coding agent that runs in your terminal. Version 0.145.0 via Homebrew Cask; verified 2026-07-21. Also installable with nix: nix profile install nixpkgs#codex.
agent safety
Agent safety answer
codex is an AI coding agent application with local file and tool access potential.
Remote mutation
Can ask or drive tools that mutate repositories, packages, and cloud services.
Publish/artifact risk
Can generate code, patches, and release commands.
Recommended control
Run with scanned worktrees and gate sensitive host tool calls.
Agent-use guidance
Limit workspace scope; require approval before commands expose secrets or change remote state.
install
Additional install commands
macOS
Homebrew Caskverified · 100%
brew install --cask codexlocal Homebrew cask metadata
overview
Package summary
OpenAI's coding agent that runs in your terminal
Project links
Commands and aliases
- codex
- codex-aarch64-apple-darwin
history
Project history and usage
Codex CLI is OpenAI's local coding agent, packaged as a terminal command and distributed through installation scripts, npm, GitHub releases, and Homebrew cask.
Project history
The official README frames Codex CLI as the local-computer member of the Codex product family, distinct from the editor integrations, desktop app experience, and cloud-based Codex Web. The repository also links to OpenAI's Codex documentation, install/build notes, contributing information, and an open-source fund.
Adoption history
Codex is packaged for several install paths in its official README: shell install scripts for Mac, Linux, and Windows, npm as @openai/codex, Homebrew cask as codex, and downloadable release binaries. The supplied cask facts identify the Homebrew package as cask:codex.
How it is used
The package-facing workflow is simple: install the executable, run codex, and authenticate with a ChatGPT plan or API key. Configuration lives under ~/.codex/config.toml, and local authentication state is stored under ~/.codex/auth.json according to the existing curation.
Why package nerds care
For package nerds, Codex is notable because it ships an AI coding agent as a conventional local CLI while also spanning product surfaces: terminal, IDE, desktop app, and cloud. The Homebrew cask packages a fast-moving OpenAI developer tool as a single codex command rather than a traditional library.
Timeline
- README: Codex CLI is documented as a local coding agent from OpenAI.
- README: Installation paths include shell scripts, npm, Homebrew cask, and GitHub release binaries.
Related projects
- The README distinguishes Codex CLI from OpenAI's IDE install path, Codex App, and Codex Web, while codex-acp packages Codex for ACP-compatible clients.
Sources
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for codex. Nucleus package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- No Homebrew bottle metadata was recorded.
- Installs with 1 runtime dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
~/.codex/config.toml
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.codex/auth.json
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
codex-aarch64-apple-darwin | binary | Homebrew cask binary | codex-aarch64-apple-darwin |
codex | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-25
manager version0.145.0
manager updated2026-07-21
local dataok
upstreamnot checked
latest detectednot detected
https://github.com/openai/codex
- infoNo cached GitHub release or tag data was available.https://github.com/openai/codexnone confidence
install metadata
Package metadata
| Package key | cask:codex |
|---|---|
| Version | 0.145.0 |
| Package manager | Homebrew Cask |
| Package manager page | https://formulae.brew.sh/cask/codex |
| Homepage | https://github.com/openai/codex |
| Repository | https://github.com/openai/codex |
| Source archive | https://github.com/openai/codex/releases/download/rust-v0.145.0/codex-aarch64-apple-darwin.tar.gz |
| Last updated | 2026-07-21T19:05:08Z |
| Pulse | updated |
| SHA-256 | 072a30a65f05666735889ef0f60b56db186adbdde9d5c5cc1a64be0b598530fe |
| Download URL | https://github.com/openai/codex/releases/download/rust-v0.145.0/codex-aarch64-apple-darwin.tar.gz |
| Dependencies | ripgrep |
| Bottle | not recorded |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew cask API |
|---|---|
| Tap | homebrew/cask |
| Full Token | codex |
| Names |
|
| Depends On | |
| Artifacts | |
| Deprecated | no |
| Disabled | no |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
codex
nix profile install nixpkgs#codex- normalized package name match
- Matched by: Codex
MacPorts95%
codex
sudo port install codex- normalized package name match
- Matched by: Codex
Scoop95%
main/codex
scoop install main/codex- normalized package name match
- Matched by: Codex
winget95%
OpenAI.Codex
winget install --id OpenAI.Codex -e- normalized package name match
- Matched by: Codex
winget95%
WalkingWiFi.CodexRateLimitTray
winget install --id WalkingWiFi.CodexRateLimitTray -e- normalized package name match
- Matched by: Codex
winget95%
jcv8000.Codex
winget install --id jcv8000.Codex -e- normalized package name match
- Matched by: Codex
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment