// CODING AGENT · CODEX CLI
Codex CLI
Pattern A · full governance
Wrap the Codex CLI's terminal traffic with agentics capture. Every model call it makes is routed through Agentics and receipted — you change nothing in Codex itself.
Pattern A — via
agentics capture. The capture proxy sits in front of the terminal tool, routes its provider traffic through Agentics, and writes a hash-only receipt for every covered AI call. Its CA is local to the session and deleted on stop.
Capture this shell
Start a local Observe session. Provider traffic from this terminal is forwarded through Agentics and receipted — no code changes.
macOS / Linux
export AGENTICS_API_KEY="ak_…"
curl -fsSL https://agentics.you/install.sh | bash
export PATH="$HOME/.agentics/bin:$PATH"
agentics login --api-key "$AGENTICS_API_KEY"
eval "$(agentics capture)"
agentics capture doctorRun Codex CLI normally
Use Codex CLI exactly as before from this same terminal. Its model calls are routed and governed through Agentics.
shell
codex # your normal Codex CLI sessionSee the receipt → then stop
shell
# the receipt hash for the last covered call:
agentics log tail --limit 1
# → x-agentics-receipt: <receipt_hash> (also in Console → Proof Ledger)
# end the session and delete the local CA:
agentics capture stop