Connect OpenAI Codex CLI to Agent Authority
Add SecureAuth Agent Authority as an MCP server in OpenAI's Codex CLI so every tool call is checked and audited
When you finish, every MCP tool call Codex CLI makes is checked against your policies and recorded in the audit log. OpenAI's Codex CLI reaches your approved tools through one SecureAuth Agent Authority gateway URL, and each developer signs in as themselves.
Setup
-
Add the MCP server. Add the following to
~/.codex/config.toml:[mcp_servers.secureauth] url = "https://your-gateway-url/gateway/mcp" -
Authenticate.
codex mcp login secureauth -
Start Codex.
codexThe agent is auto-registered on first connect.
Connecting to just one MCP? To stay under an agent's tool limit, point the URL at a single MCP —
/gateway/mcp/{slug}instead of/gateway/mcp. Grab the exact URL from the resource's detail page; see Scope a connection.
Next steps
- Create a policy – control which tools Codex CLI can call.
- Monitor activity – watch its tool calls appear in the dashboard and audit log.
- Send Codex telemetry – track its token usage in Enforcement traffic and its cost in Cost and adoption.