Use this glossary as a quick reference for Codex terms across the app, CLI, IDE extension, cloud, SDK, and related integrations.
| Term | Definition | Applies to |
|---|---|---|
| Agent | The Codex worker that reasons over context, uses tools, and completes a task. | App, CLI, IDE extension, Cloud |
| AGENTS.md | Repository or user guidance file that gives Codex persistent instructions. | App, CLI, IDE extension, Cloud |
| Analytics dashboard | Admin view for Codex usage, adoption, and code review metrics. | Enterprise |
| API key sign-in | Authentication using an OpenAI API key. | App, CLI, IDE extension |
| Approval policy | Rules for when Codex must ask before taking an action. | App, CLI, IDE extension |
| Approval request | Codex asking to allow a restricted action. | App, CLI, IDE extension |
| Apps (connectors) | Integration that lets Codex access external services. Available through plugins; also called connectors. | App, CLI, IDE extension |
| Appshot | Snapshot of the frontmost app window sent to a Codex thread. | App |
| Auth cache | Locally stored login credentials reused by Codex. | App, CLI, IDE extension |
| Automatic approval review | Model-based review of eligible approval requests before they proceed. | App, CLI, IDE extension |
| Automation | A scheduled or recurring Codex task. | App |
| Automation run | One execution of a scheduled automation that may report findings or archive itself. | App |
| Browser use | App capability that lets Codex operate the in-app browser directly. | App |
| Chat | A Codex conversation not tied to a project. | App |
| ChatGPT sign-in | Authentication using a ChatGPT account and workspace permissions. | App, CLI, IDE extension, Cloud |
| Chronicle | Opt-in feature that builds memories from recent screen context. | App |
| Cloud | Mode where Codex works remotely in an OpenAI-managed environment. | App, IDE extension, Web |
| Cloud environment | Configured container setup used for Codex cloud tasks. | Cloud |
| Cloud task | A remotely executed Codex task that runs in a cloud environment. | Cloud |
| Cloud thread | A thread that runs in a Codex cloud environment. | Cloud |
| Codex | OpenAI's coding agent for software development tasks. | App, CLI, IDE extension, Web, Cloud, SDK |
| Codex app | Desktop app for running Codex threads in parallel, with built-in worktree support, automations, and Git functionality. | Desktop |
| Codex app-server | Local JSON-RPC server for embedding Codex threads, turns, approvals, history, and streamed events in custom clients. | App, IDE extension, SDK |
| Codex CLI | Terminal client for running Codex interactively or in scripts. | Terminal |
| Codex cloud | OpenAI-managed execution environment where Codex can work on repository tasks remotely. | Web, App, IDE extension |
| codex exec | CLI command for running Codex non-interactively from scripts or CI. | CLI |
| Codex IDE extension | Editor integration for using Codex inside IDEs like VS Code, JetBrains IDEs, Cursor, and Windsurf. | IDE |
| Codex SDK | Programmatic interface for building Codex-powered workflows or integrations. | SDK |
| Codex web | Browser-based Codex surface for delegating cloud tasks. | Browser |
| Codex-managed worktree | A temporary worktree Codex creates and manages for a thread. | App |
| Compaction | Summarizing older context so long-running work can continue. | App, CLI, IDE extension, Cloud |
| Compliance API | API for exporting Codex activity and audit metadata. | Enterprise |
| Computer use | App capability that lets Codex interact with desktop applications through the UI. | App |
| config.toml | Local Codex configuration files. | App, CLI, IDE extension |
| Connected host | Computer or development environment that provides files, tools, and shell access for remote Codex work. | App, Mobile |
| Connector | App integration that lets Codex access external services. Available through plugins; also called apps. | App, Cloud |
| Container cache | Saved cloud container state reused to speed up future tasks. | Cloud |
| Context | Information Codex can use while working, such as files, prior messages, tool output, and instructions. | App, CLI, IDE extension, Cloud, SDK |
| Context window | The maximum amount of information the model can consider at once. | App, CLI, IDE extension, Cloud, SDK |
| Custom agent | User-defined agent role with its own instructions and settings. | App, CLI |
| Deny-read rule | Filesystem permission rule that prevents Codex from reading sensitive paths or glob matches. | App, CLI, IDE extension, Enterprise |
| Diff | Set of Git file changes shown for inspection, comments, staging, or reverting. | App, Git, Review |
| Domain allowlist | Set of domains Codex cloud can reach when agent internet access is enabled. | Cloud |
| Environment (local) | App configuration to tell Codex how to set up worktrees for a project. | App, Worktree |
| Environment variable | Runtime configuration value available during task execution. | Cloud, CLI, IDE extension |
| Ephemeral session | Non-interactive run that skips saving session state after it completes. | CLI |
| Fast mode | Speed setting that makes supported models respond faster at a higher credit cost. | CLI, IDE extension |
| Filesystem permission | Permission profile rule that grants or denies read and write access to paths. | App, CLI, IDE extension |
| Finding | A notable result or issue surfaced by an automation. | App |
| Full access | Mode where Codex runs without normal sandbox restrictions. | App, CLI, IDE extension |
| Git worktree | A second checkout of the same repository for parallel branch work. | App, Git |
| Handoff | Moving a thread and its work between Local and Worktree. | App |
| Heartbeat | A recurring thread wake-up that returns Codex to the same conversation on a schedule. Also called a thread automation. | App |
| Hook | A lifecycle handler that runs when a Codex event matches, such as tool use, permission requests, or when a turn stops. | App, CLI, IDE extension |
| Hook event | Lifecycle point where configured hook handlers can run. | App, CLI, IDE extension |
| Hunk | Contiguous section of a diff that can be staged, unstaged, or reverted independently. | App, Git, Review |
| Inline comment | Line-specific feedback attached to a diff. | App |
| Live web search | Real-time web lookup for current information. | App, CLI, IDE extension |
| Local | Mode where Codex works on the user's computer. | App, CLI, IDE extension |
| Local thread | A thread that runs on the user's machine. | App, CLI, IDE extension |
| Maintenance script | Optional script run when a cached cloud container resumes. | Cloud |
| Managed configuration | Organization-controlled Codex defaults and restrictions. | Enterprise |
| MCP | Model Context Protocol, a standard for connecting Codex to external tools and context. | App, CLI, IDE extension |
| MCP resource | Readable context exposed by an MCP server for Codex to inspect. | App, CLI, IDE extension |
| MCP server | External tool or context provider exposed through MCP. | App, CLI, IDE extension |
| MCP tool | Action exposed by an MCP server that Codex can call during a task. | App, CLI, IDE extension |
| MDM | Mobile device management tooling for distributing device profiles and managed Codex settings. | Enterprise |
| Memories | Locally stored context Codex can reuse across sessions. | App, CLI, IDE extension |
| Model | The AI model Codex uses for reasoning and tool work. | App, CLI, IDE extension, Cloud, SDK |
| Network access | Permission for commands or environments to reach the internet. | App, CLI, IDE extension, Cloud |
| Network policy | Domain-based allow and deny rules that constrain sandboxed outbound network traffic. | App, CLI, IDE extension |
| Non-interactive mode | CLI mode for running Codex from scripts or CI. | CLI |
| Output schema | JSON Schema passed to `codex exec` to constrain the final response. | CLI |
| Permanent worktree | A long-lived worktree kept as its own project. | App |
| Permission profile | Named least-privilege policy that combines filesystem and network rules for local command execution. | App, CLI, IDE extension |
| Plan | Codex's proposed or tracked steps for completing a task. | App, CLI, IDE extension, Cloud |
| Plugin | Installable bundle that can distribute skills, tools, and integrations. | App, CLI, IDE extension |
| Plugin manifest | Plugin metadata file that identifies a plugin and points to bundled skills, apps, MCP servers, hooks, and metadata. | App, CLI, IDE extension, Plugins |
| Prefix rule | Command-rule pattern that allows, prompts for, or forbids matching command prefixes. | App, CLI, IDE extension, Enterprise |
| Profile | Named configuration preset for Codex. | CLI, IDE extension |
| Progressive disclosure | Loading skill details only when needed to preserve context. | App, CLI, IDE extension |
| Project | A selected codebase or folder Codex works in. | App |
| Prompt | The user instruction or request sent to Codex. | App, CLI, IDE extension, Cloud, SDK |
| Pull request review | Codex review of changes or feedback on a pull request. | App, CLI, GitHub |
| RBAC | Role-based access control for workspace permissions. | Enterprise |
| Read-only mode | Mode where Codex can inspect but not modify without approval. | App, CLI, IDE extension |
| Reasoning effort | Setting that controls how much reasoning budget a model uses. | App, CLI, IDE extension, SDK |
| Remote connection | Connection that lets Codex work from another device using a connected host. | App, Mobile |
| requirements.toml | Admin-enforced requirements file for managed Codex setups. | Enterprise |
| Review pane | App view for inspecting diffs, comments, and Git changes. | App |
| Rules | Policies that allow, prompt for, or deny command prefixes or permission exceptions. | App, CLI, IDE extension |
| Sandbox | Enforced boundary limiting what Codex commands can access or modify. | App, CLI, IDE extension |
| Sandbox mode | Configuration that defines Codex's filesystem and network limits. | App, CLI, IDE extension |
| Sandbox preset | SDK shorthand for common sandbox policies such as read-only, workspace-write, or full access. | SDK |
| Schedule | The timing rule for an automation. | App |
| Secret | Encrypted value available to setup scripts but removed before the agent phase. | Cloud |
| Setup script | Script run before the agent starts to install dependencies or prepare tools. | App worktrees |
| Skill | Reusable workflow package with instructions and optional scripts or references. | App, CLI, IDE extension |
| Skill invocation | Explicit or implicit activation of a skill. | App, CLI, IDE extension |
| Slash command | Command entered with a leading slash to control or inspect a Codex CLI session. | CLI |
| Standalone automation | Independent scheduled run that reports separate findings. | App |
| STDIO MCP server | MCP server launched as a local process by a configured command and arguments. | CLI, IDE extension |
| Streamable HTTP MCP server | MCP server reached over HTTP, optionally with bearer token or OAuth authentication. | CLI, IDE extension |
| Subagent | Specialized child agent spawned to work on part of a task. | App, CLI |
| Subagent workflow | Workflow where Codex runs delegated agents in parallel and combines their results. | App, CLI |
| Task | The unit of work Codex is asked to complete. | App, CLI, IDE extension, Cloud, SDK |
| Thread | A single Codex session containing prompts, model output, and tool activity. | App, CLI, IDE extension, Cloud, SDK |
| Thread automation | Recurring wake-up attached to an existing thread. Also called a heartbeat. | App |
| Thread fork | New thread branched from the stored history of an existing thread. | App-server, SDK |
| Turn | One exchange in a thread, usually a user prompt plus Codex's response and actions. | App, CLI, IDE extension, Cloud, SDK |
| Universal image | Default Codex cloud container image with common tools preinstalled. | Cloud |
| Web search cache | Pre-indexed search results Codex can use without live browsing. | App, CLI, IDE extension |
| Worktree | Mode where Codex isolates changes in a separate Git worktree. | App |
| Writable roots | Directories Codex is allowed to modify. | App, CLI, IDE extension |
Term
AgentDefinition
The Codex worker that reasons over context, uses tools, and completes a task.
Applies to
App, CLI, IDE extension, CloudTerm
AGENTS.mdDefinition
Repository or user guidance file that gives Codex persistent instructions.
Applies to
App, CLI, IDE extension, CloudDefinition
Admin view for Codex usage, adoption, and code review metrics.
Applies to
EnterpriseTerm
API key sign-inDefinition
Authentication using an OpenAI API key.
Applies to
App, CLI, IDE extensionTerm
Approval policyDefinition
Rules for when Codex must ask before taking an action.
Applies to
App, CLI, IDE extensionTerm
Approval requestDefinition
Codex asking to allow a restricted action.
Applies to
App, CLI, IDE extensionDefinition
Integration that lets Codex access external services. Available through plugins; also called connectors.
Applies to
App, CLI, IDE extensionTerm
Auth cacheDefinition
Locally stored login credentials reused by Codex.
Applies to
App, CLI, IDE extensionDefinition
Model-based review of eligible approval requests before they proceed.
Applies to
App, CLI, IDE extensionTerm
Automation runDefinition
One execution of a scheduled automation that may report findings or archive itself.
Applies to
AppTerm
Browser useDefinition
App capability that lets Codex operate the in-app browser directly.
Applies to
AppTerm
ChatGPT sign-inDefinition
Authentication using a ChatGPT account and workspace permissions.
Applies to
App, CLI, IDE extension, CloudTerm
CloudDefinition
Mode where Codex works remotely in an OpenAI-managed environment.
Applies to
App, IDE extension, WebDefinition
Configured container setup used for Codex cloud tasks.
Applies to
CloudTerm
Cloud taskDefinition
A remotely executed Codex task that runs in a cloud environment.
Applies to
CloudTerm
CodexDefinition
OpenAI's coding agent for software development tasks.
Applies to
App, CLI, IDE extension, Web, Cloud, SDKTerm
Codex appDefinition
Desktop app for running Codex threads in parallel, with built-in worktree support, automations, and Git functionality.
Applies to
DesktopTerm
Codex app-serverDefinition
Local JSON-RPC server for embedding Codex threads, turns, approvals, history, and streamed events in custom clients.
Applies to
App, IDE extension, SDKTerm
Codex CLIDefinition
Terminal client for running Codex interactively or in scripts.
Applies to
TerminalTerm
Codex cloudDefinition
OpenAI-managed execution environment where Codex can work on repository tasks remotely.
Applies to
Web, App, IDE extensionTerm
codex execDefinition
CLI command for running Codex non-interactively from scripts or CI.
Applies to
CLIDefinition
Editor integration for using Codex inside IDEs like VS Code, JetBrains IDEs, Cursor, and Windsurf.
Applies to
IDETerm
Codex SDKDefinition
Programmatic interface for building Codex-powered workflows or integrations.
Applies to
SDKDefinition
A temporary worktree Codex creates and manages for a thread.
Applies to
AppTerm
CompactionDefinition
Summarizing older context so long-running work can continue.
Applies to
App, CLI, IDE extension, CloudTerm
Compliance APIDefinition
API for exporting Codex activity and audit metadata.
Applies to
EnterpriseTerm
Computer useDefinition
App capability that lets Codex interact with desktop applications through the UI.
Applies to
AppTerm
Connected hostDefinition
Computer or development environment that provides files, tools, and shell access for remote Codex work.
Applies to
App, MobileTerm
ConnectorDefinition
App integration that lets Codex access external services. Available through plugins; also called apps.
Applies to
App, CloudTerm
Container cacheDefinition
Saved cloud container state reused to speed up future tasks.
Applies to
CloudTerm
ContextDefinition
Information Codex can use while working, such as files, prior messages, tool output, and instructions.
Applies to
App, CLI, IDE extension, Cloud, SDKTerm
Context windowDefinition
The maximum amount of information the model can consider at once.
Applies to
App, CLI, IDE extension, Cloud, SDKTerm
Custom agentDefinition
User-defined agent role with its own instructions and settings.
Applies to
App, CLITerm
Deny-read ruleDefinition
Filesystem permission rule that prevents Codex from reading sensitive paths or glob matches.
Applies to
App, CLI, IDE extension, EnterpriseTerm
DiffDefinition
Set of Git file changes shown for inspection, comments, staging, or reverting.
Applies to
App, Git, ReviewTerm
Domain allowlistDefinition
Set of domains Codex cloud can reach when agent internet access is enabled.
Applies to
CloudDefinition
App configuration to tell Codex how to set up worktrees for a project.
Applies to
App, WorktreeDefinition
Runtime configuration value available during task execution.
Applies to
Cloud, CLI, IDE extensionDefinition
Non-interactive run that skips saving session state after it completes.
Applies to
CLITerm
Fast modeDefinition
Speed setting that makes supported models respond faster at a higher credit cost.
Applies to
CLI, IDE extensionDefinition
Permission profile rule that grants or denies read and write access to paths.
Applies to
App, CLI, IDE extensionTerm
Full accessDefinition
Mode where Codex runs without normal sandbox restrictions.
Applies to
App, CLI, IDE extensionTerm
Git worktreeDefinition
A second checkout of the same repository for parallel branch work.
Applies to
App, GitTerm
HeartbeatDefinition
A recurring thread wake-up that returns Codex to the same conversation on a schedule. Also called a thread automation.
Applies to
AppTerm
HookDefinition
A lifecycle handler that runs when a Codex event matches, such as tool use, permission requests, or when a turn stops.
Applies to
App, CLI, IDE extensionTerm
Hook eventDefinition
Lifecycle point where configured hook handlers can run.
Applies to
App, CLI, IDE extensionTerm
HunkDefinition
Contiguous section of a diff that can be staged, unstaged, or reverted independently.
Applies to
App, Git, ReviewTerm
Live web searchDefinition
Real-time web lookup for current information.
Applies to
App, CLI, IDE extensionTerm
Local threadDefinition
A thread that runs on the user's machine.
Applies to
App, CLI, IDE extensionDefinition
Optional script run when a cached cloud container resumes.
Applies to
CloudDefinition
Organization-controlled Codex defaults and restrictions.
Applies to
EnterpriseTerm
MCPDefinition
Model Context Protocol, a standard for connecting Codex to external tools and context.
Applies to
App, CLI, IDE extensionTerm
MCP resourceDefinition
Readable context exposed by an MCP server for Codex to inspect.
Applies to
App, CLI, IDE extensionTerm
MCP serverDefinition
External tool or context provider exposed through MCP.
Applies to
App, CLI, IDE extensionTerm
MCP toolDefinition
Action exposed by an MCP server that Codex can call during a task.
Applies to
App, CLI, IDE extensionTerm
MDMDefinition
Mobile device management tooling for distributing device profiles and managed Codex settings.
Applies to
EnterpriseTerm
MemoriesDefinition
Locally stored context Codex can reuse across sessions.
Applies to
App, CLI, IDE extensionTerm
ModelDefinition
The AI model Codex uses for reasoning and tool work.
Applies to
App, CLI, IDE extension, Cloud, SDKTerm
Network accessDefinition
Permission for commands or environments to reach the internet.
Applies to
App, CLI, IDE extension, CloudTerm
Network policyDefinition
Domain-based allow and deny rules that constrain sandboxed outbound network traffic.
Applies to
App, CLI, IDE extensionTerm
Output schemaDefinition
JSON Schema passed to `codex exec` to constrain the final response.
Applies to
CLIDefinition
Named least-privilege policy that combines filesystem and network rules for local command execution.
Applies to
App, CLI, IDE extensionTerm
PlanDefinition
Codex's proposed or tracked steps for completing a task.
Applies to
App, CLI, IDE extension, CloudTerm
PluginDefinition
Installable bundle that can distribute skills, tools, and integrations.
Applies to
App, CLI, IDE extensionTerm
Plugin manifestDefinition
Plugin metadata file that identifies a plugin and points to bundled skills, apps, MCP servers, hooks, and metadata.
Applies to
App, CLI, IDE extension, PluginsTerm
Prefix ruleDefinition
Command-rule pattern that allows, prompts for, or forbids matching command prefixes.
Applies to
App, CLI, IDE extension, EnterpriseDefinition
Loading skill details only when needed to preserve context.
Applies to
App, CLI, IDE extensionTerm
PromptDefinition
The user instruction or request sent to Codex.
Applies to
App, CLI, IDE extension, Cloud, SDKDefinition
Codex review of changes or feedback on a pull request.
Applies to
App, CLI, GitHubTerm
Read-only modeDefinition
Mode where Codex can inspect but not modify without approval.
Applies to
App, CLI, IDE extensionTerm
Reasoning effortDefinition
Setting that controls how much reasoning budget a model uses.
Applies to
App, CLI, IDE extension, SDKDefinition
Connection that lets Codex work from another device using a connected host.
Applies to
App, MobileDefinition
Admin-enforced requirements file for managed Codex setups.
Applies to
EnterpriseTerm
RulesDefinition
Policies that allow, prompt for, or deny command prefixes or permission exceptions.
Applies to
App, CLI, IDE extensionTerm
SandboxDefinition
Enforced boundary limiting what Codex commands can access or modify.
Applies to
App, CLI, IDE extensionTerm
Sandbox modeDefinition
Configuration that defines Codex's filesystem and network limits.
Applies to
App, CLI, IDE extensionTerm
Sandbox presetDefinition
SDK shorthand for common sandbox policies such as read-only, workspace-write, or full access.
Applies to
SDKTerm
SecretDefinition
Encrypted value available to setup scripts but removed before the agent phase.
Applies to
CloudTerm
Setup scriptDefinition
Script run before the agent starts to install dependencies or prepare tools.
Applies to
App worktreesTerm
SkillDefinition
Reusable workflow package with instructions and optional scripts or references.
Applies to
App, CLI, IDE extensionTerm
Skill invocationDefinition
Explicit or implicit activation of a skill.
Applies to
App, CLI, IDE extensionTerm
Slash commandDefinition
Command entered with a leading slash to control or inspect a Codex CLI session.
Applies to
CLIDefinition
Independent scheduled run that reports separate findings.
Applies to
AppTerm
STDIO MCP serverDefinition
MCP server launched as a local process by a configured command and arguments.
Applies to
CLI, IDE extensionDefinition
MCP server reached over HTTP, optionally with bearer token or OAuth authentication.
Applies to
CLI, IDE extensionDefinition
Workflow where Codex runs delegated agents in parallel and combines their results.
Applies to
App, CLITerm
TaskDefinition
The unit of work Codex is asked to complete.
Applies to
App, CLI, IDE extension, Cloud, SDKTerm
ThreadDefinition
A single Codex session containing prompts, model output, and tool activity.
Applies to
App, CLI, IDE extension, Cloud, SDKDefinition
Recurring wake-up attached to an existing thread. Also called a heartbeat.
Applies to
AppTerm
Thread forkDefinition
New thread branched from the stored history of an existing thread.
Applies to
App-server, SDKTerm
TurnDefinition
One exchange in a thread, usually a user prompt plus Codex's response and actions.
Applies to
App, CLI, IDE extension, Cloud, SDKTerm
Universal imageDefinition
Default Codex cloud container image with common tools preinstalled.
Applies to
CloudTerm
Web search cacheDefinition
Pre-indexed search results Codex can use without live browsing.
Applies to
App, CLI, IDE extensionTerm
Writable rootsDefinition
Directories Codex is allowed to modify.
Applies to
App, CLI, IDE extension