Skip to main content
Codex speaks the Responses protocol. Private AI Proxy configures it automatically.

With Private AI Proxy

  1. Install Private AI Proxy, sign in, and turn on Protected.
  2. On the Agents screen, connect Codex and pick a model from the verified catalog.
  3. Start codex.
The app adds a custom model provider to ~/.codex/config.toml that points at its local API with an agent-scoped token, and restores the file when you disconnect or stop Protected. From the CLI, the same connection is:

Without the Proxy

Add RedPill as a custom provider in the user-level configuration; Codex ignores model_provider and model_providers in a project-local .codex/config.toml.
~/.codex/config.toml
Pick the model from GET /v1/models; choose one that declares tools. This path does not verify ACI locally. For confidential-only routing, use an is_tee: true model with base_url = "https://tee.redpill.ai/v1". See Verified ACI clients.

Check the connection

Start codex and run one bounded tool task. With the Proxy, the provider in config.toml points at http://127.0.0.1:4180/v1; without it, at https://api.redpill.ai/v1.

Troubleshooting

References