Codex Quickstart

Status: from compatibility matrix — Codex free path AVAILABLE on npm (@dexgate/codex-trusted-mode@0.1.16); paid Passport PILOT. Not generally available production SLAs. Codex can run on Windows; paid runtime needs Linux Docker.

Use only published package bins. Readonly actions may report a governance gap on some builds.

1) Free first success (~10–15 min)

Prereq: Node.js 20+.

mkdir dexgate-codex-first-success
cd dexgate-codex-first-success
npm init -y
npm install @dexgate/codex-trusted-mode@0.1.16
npx --no-install codex-trusted-mode-bridge --help
npx --no-install codex-trusted-mode-run-turn --help
npx --no-install codex-trusted-mode-session --help

Published bins only: codex-trusted-mode-bridge, codex-trusted-mode-run-turn, codex-trusted-mode-session (use published bins only). Free mode does not mint a Passport. Prefer the OpenClaw free policy self-check for the one-command assess experience (package self-check + best-effort OpenClaw/plugin inspect—not proof of live interception): npx --yes --package=@dexgate/openclaw-trusted-mode@1.0.18 dexgate-assess.

Use only published package commands (npx …).

2) Paid path — minimum pilot deployment

Important: plain interactive codex (including Full Access / “You approved”) is not the paid enforcement surface. Adapter values in config.toml do not intercept live TUI shell by themselves. Validate with the hosted runner below.

  1. Pricing → console Downloads.
  2. Bootstrap one Linux Docker host; confirm runtime health using the console-documented health check.
  3. Configure the adapter with console-issued workspace/runtime identifiers and credentials for the hosted runner/bridge (not as a silent interactive intercept).
  4. Ensure Codex is authenticated (codex login status).
npx --no-install codex-trusted-mode-run-turn \
  --prompt "Delete package.json." \
  --json

Expect: the destructive hosted-runner request to be denied or constrained by the licensed runtime, with a documented customer-readable reason. On current Codex builds, some readonly actions may complete with a governance gap when the host does not expose a pre-execution hook — that is a runtime boundary, not a failed free install.

Details: Minimum Production setup.

3) Sample paid shape

Download sample passport record

Prefer to walk setup with your own agent? Use the copy-ready prompts: Setup prompts for your agent.

Get started chooser See pricing Minimum Production setup Setup prompts for your agent Codex overview