shell, apply_patch (Codex)
Tool : A precise action the AI can call · requires codex
Atomic commands and patches, under dual sandbox and approval control.
The cleanest security model among code agents: two orthogonal settings.
Security reflects where data goes, requested permissions and incidents on record at the verification date. It is not a guarantee of zero risk: check the deployment mode and the connections you enable.
What it does, concretely
Working with code from a terminal usually means switching between reading files, editing them manually, and running commands. Codex CLI brings these three actions into a single loop driven by a language model, without leaving the terminal.
Concretely, the tool exposes two primitives: the shell command, which executes system instructions on the local machine, and apply_patch, which applies file modifications as an atomic patch. Each action is subject to two independent controls: the sandbox level (read-only or workspace-write) and the approval level (automatic or manual). These two settings are orthogonal and configured separately.
Codex CLI is aimed at developers comfortable with a terminal who want to delegate repetitive tasks, explore an unfamiliar codebase, or automate steps in CI pipelines, while keeping control over what actually runs.
It is not suited to people who prefer a graphical interface, or to those who do not want to manage sandbox and approval settings to secure agent actions.
What it offers
- ·Shell command execution directly on the local machine from a Codex session.
- ·Atomic file patching via the apply_patch command.
- ·Sandbox level control: read-only or workspace-write mode, configurable independently.
- ·Approval level control: automatic or manual validation of each agent action.
- ·Interactive terminal mode or non-interactive mode via codex exec for pipelines and scripts.
- ·Integrated code review: analysis of uncommitted changes, a commit, or a base branch without modifying the working tree.
- ·Connection to plugins and skills to extend agent capabilities without leaving the CLI. (paid)
In practice
- Price
- Free
- Commercial use
- Commercial use: yes
- Available on
- codex
- Host
- codex
- FR interface
- No
Security and data
- Rating
- Security: serious reservations
- Capabilities
- readswritesexecutesnetwork
- Your data
- Data stays local
- Maintenance
- Active
- Last release
- 23 October 2026
Links and repository checked on 25 October 2026 · added on 1 April 2025
How to install shell, apply_patch (Codex)
curl -fsSL https://chatgpt.com/codex/install.sh | sh