Verified Codex
The recommended permission combo for local work
What it does
The docs recommend --sandbox workspace-write --ask-for-approval on-request for low-friction local work: edits inside the workspace, asks before anything beyond.
How
codex --sandbox workspace-write --ask-for-approval on-request
How much to trust this
| Applies to | ≥ 0.163.0 |
|---|---|
| Verified | Oct 17, 2026 · v0.163.0 · tested locally 本机 codex-cli 0.163.0 的 --help 中存在相关参数 |
| Depends on | --sandbox--ask-for-approvalworkspace-writeon-request |
| Source | https://developers.openai.com/codex/cli/reference (official_docs) |