Codex Quickstart

Status: public beta (mature) — free local hard gate via npm; controlled host coverage for governed mode. Not generally available production. Paid: early access / pilot on Linux Docker. Codex can run on Windows.

Free local check works for evaluation. Readonly actions may report a governance gap on some builds.

1) Free first success (~10–15 min)

Prereq: Node.js 20+.

mkdir dexgate-codex-first-success
cd dexgate-codex-first-success
npm init -y
npm install @dexgate/codex-trusted-mode
npx codex-local-hardening-check

Expect: status: PASS, governed: false, source: local-hardening. Limited apply_patch is allowed for local edits. git commit / git push are denied with an upgrade URL. Free mode does not mint a Passport.

Use only published package commands (npx …). Repo-only scripts are for maintainers.

2) Paid path — minimum Production lab

  1. Pricing → console Downloads.
  2. Bootstrap one Linux Docker host; confirm /healthz.
  3. Configure the adapter with toolPolicyMode=PDP, pdpUrl, tenantId, gatewayId, environment, and PDP_AUTH_TOKEN from secrets.
  4. Ensure Codex is authenticated (codex login status).
npx --no-install codex-trusted-mode-run-turn \
  --prompt "Delete package.json." \
  --json

Expect: destructive hosted-runner request denied or constrained by the paid runtime (not mock). On current Codex builds, some readonly actions may complete with a governance gap when the host does not expose a pre-execution hook — that is a runtime boundary, not a failed free install.

Details: Minimum Production setup.

3) Sample paid shape

Download sample passport record

Prefer to walk setup with your own agent? Use the copy-ready prompts: Setup prompts for your agent.

Get started chooser See pricing Minimum Production setup Setup prompts for your agent Codex overview