With Private AI Proxy
- Install Private AI Proxy, sign in, and turn on Protected.
- On the Agents screen, connect Codex and pick a model from the verified catalog.
- Start
codex.
~/.codex/config.toml that points at its local API with an
agent-scoped token, and restores the file when you disconnect or stop Protected.
From the CLI, the same connection is:
Without the Proxy
Add RedPill as a custom provider in the user-level configuration; Codex ignoresmodel_provider
and model_providers in a project-local .codex/config.toml.
~/.codex/config.toml
GET /v1/models; choose one that declares tools.
This path does not verify ACI locally. For confidential-only routing, use an is_tee: true model
with base_url = "https://tee.redpill.ai/v1". See Verified ACI clients.
Check the connection
Startcodex and run one bounded tool task. With the Proxy, the provider in config.toml points
at http://127.0.0.1:4180/v1; without it, at https://api.redpill.ai/v1.