CodexPro

Give ChatGPT local coding tools for repos you explicitly allow.

CodexPro is a local MCP server. It connects your ChatGPT session to your machine and repos you allow.

ChatGPT can read, search, edit, review, verify, import attachments, and write handoff plans. It stays inside those roots.

It is not a hosted SaaS product, model proxy, quota bypass, account pool, or remote shell service.

Install

Needs:

• Node.js 20+
• A ChatGPT account that can create custom MCP plugins
• An HTTPS URL to your machine for ChatGPT web (tunnel or Tailscale Funnel)

npm install -g codexpro
cd /path/to/your/repo
codexpro setup

Connect in ChatGPT

1. Settings -> Security and login → turn Developer mode on (keep CSP enforcement on).
2. Settings -> Plugins → Plugins tab → + beside Search plugins.
3. Create a plugin named CodexPro.
4. Connection: Server URL → paste the URL CodexPro copied.
5. Authentication: No Authentication / None (change this if the form defaults to OAuth).

CodexPro auth is the token already in that URL. Do not share the URL.

Open Plugins and click +	Complete the New Plugin form

Daily use from the same repo:

codexpro start

If plugin creation fails, run codexpro connection-test and check whether ChatGPT requests reach the local server.

What ChatGPT can do

With workspace write mode (the normal agent setup):

• read, search, and inspect the repo
• edit with write, edit, or guarded apply_patch
• import ChatGPT attachments with import_file
• run allowlisted checks with bash
• review diffs with show_changes
• write plans under .ai-bridge
• export a context bundle for chats that cannot call tools

Multiple projects

One CodexPro process can allow more than one repo:

codexpro settings set --project ~/code/web --project ~/code/api
codexpro settings show
codexpro start

Ask ChatGPT to open_workspace on an allowed project. open_current_workspace returns to the launch repo.

For two ChatGPT accounts or hard isolation, run two CodexPro processes on different ports and Server URLs.

Commands

codexpro setup
codexpro start
codexpro start --root /path/to/repo
codexpro doctor
codexpro connection-test
codexpro settings
codexpro inspect
codexpro review

Useful modes:

codexpro start --no-bash
codexpro start --tool-mode minimal
codexpro start --tool-mode full
codexpro start --mode handoff
codexpro start --mode pro
codexpro start --headless

Opt-in tool cards:

CODEXPRO_TOOL_CARDS=1 codexpro start

Public HTTPS options

ChatGPT web needs HTTPS:

codexpro start --tunnel cloudflare          # quick demo URL (changes)
codexpro ngrok --hostname your.ngrok-free.dev
codexpro stable --hostname codexpro.example.com --tunnel-name codexpro
codexpro tailscale --hostname your-device.your-tailnet.ts.net
codexpro start --tunnel none                # local only

Keep a stable token for stable hostnames:

mkdir -p ~/.codexpro
openssl rand -hex 32 > ~/.codexpro/http-token
chmod 600 ~/.codexpro/http-token

Prefer Authorization: Bearer <token> when the client supports headers. The ?codexpro_token= query form is a personal compatibility fallback.

Safety defaults

• Public tunnels require a CodexPro HTTP token (min 24 bytes)
• Writes stay hidden unless write mode is workspace
• Safe bash is the default
• Blocked paths cover .env, keys, .git, build caches, and similar
• Attachment import only accepts ChatGPT Apps SDK file objects from approved HTTPS hosts

Read SECURITY.md before exposing a tunnel.

Update

npm install -g codexpro@latest
codexpro --version

Restart codexpro start after updating. Saved profiles under ~/.codexpro stay in place.

Development

npm install
npm run build
npm run smoke
npm run stress
npm run release:check

Publish only from the CodexPro root:

cd /path/to/codexpro
npm run release:publish

Docs

• Website
• FAQ
• Security
• Stable URL guide
• Changelog
• Contributors