Codex Login Manager for macOS

Diagnose Codex CLI authentication and restart the official ChatGPT OAuth flow in one click.

简体中文 · Download for macOS

Codex Login Manager shows what the Codex CLI is actually using: ChatGPT OAuth, API-key mode, an incomplete auth.json, or a missing CLI. It then starts the official codex login flow and checks the result again. It does not implement OAuth itself, receive your password, or upload credentials.

Why use this instead of only running codex login?

• See whether Codex is using ChatGPT OAuth or an API key.
• Find the CLI inside ChatGPT.app or Codex.app, on PATH, or in common standalone installation locations.
• Distinguish a missing, malformed, incomplete, or stale ~/.codex/auth.json.
• Start the official browser login and automatically re-check when it finishes.
• Inspect command output with known API-key, OAuth-token, and JWT patterns redacted to reduce accidental exposure.
• Keep ~/.codex/config.toml untouched.

Install

1. Open the Releases page.
2. Download CodexLoginManager-*-macOS-universal.zip and optionally verify it against SHA256SUMS.txt.
3. Unzip the app and move CodexLoginManager.app to /Applications.
4. Try to open the app once. If macOS blocks it, open System Settings > Privacy & Security, click Open Anyway for Codex Login Manager, then confirm Open.

The downloadable beta is universal for Apple Silicon and Intel Macs. It is open source and ad-hoc signed, but not Apple-notarized yet. macOS may therefore show an unidentified-developer warning. Follow Apple's Open Anyway instructions; do not disable Gatekeeper globally.

Codex Login Manager requires macOS 14 or later and one of these official Codex CLI locations:

Installation	CLI path
Current bundled CLI	Contents/Resources/codex-cli/bin/codex inside ChatGPT.app or Codex.app
Native bundled fallback	Contents/Resources/codex-cli/CodexCLI.app/Contents/MacOS/codex
Older app layout	Contents/Resources/codex
Standalone CLI	PATH, Homebrew, ~/.local/bin, Volta, or nvm installations

Starting with v1.0.0-beta.3, the app checks system and user Applications folders and rediscovers the CLI on refresh. Finder launches do not require shell startup files to expose nvm.

Local dictation patch management

Version v1.0.0-beta.3 adds a Dictation Patch tab for status, supported build, backup readiness, enable/disable, and interrupted-transaction recovery. It calls the prepared local codex-dictation-research/dictation-patch.mjs tool; the resource folder can be changed in the UI. Official application bundles are not included in this repository. The local tool is not bundled; see the tool protocol and trust requirements.

Enabling replaces the installed Codex with a locally signed build. Permissions or sign-in may be requested again, and some system integrations may be unavailable. Disabling restores the official backup. Account/workspace checks remain intact, and real transcription still requires manual verification. The downloadable app includes the management interface only, not a ready-to-use dictation patch. Without a separately prepared trusted tool, the patch tab reports missing resources while login diagnostics remain available. This is not a system-wide dictation app.

Privacy and security

• Reads ~/.codex/auth.json locally to identify the authentication mode.
• Runs the installed official codex login status and codex login commands.
• Redacts named secrets, OpenAI-style API keys, and JWTs before displaying CLI output.
• Does not write to ~/.codex/config.toml.
• Has no analytics, account system, project server, or third-party network request of its own.

Do not attach auth.json, API keys, OAuth tokens, JWTs, or unredacted logs to a public issue. See Privacy and Security for the exact trust boundary.

Build from source

Requirements: macOS 14+, Swift 6, and Xcode 16 or newer.

git clone https://github.com/xiaohei210509/CodexLoginManager.git
cd CodexLoginManager
./script/build_and_run.sh

Other useful commands:

swift test --disable-index-store -j 1
./script/build_and_run.sh --build
./script/build_and_run.sh --verify
./script/package_release.sh 1.0.0-beta.3

The app follows the macOS language setting and currently includes English and Simplified Chinese. GitHub Actions runs unit tests, builds the app bundle, verifies its signature, and packages tagged universal releases.

Help and contributing

• Troubleshooting
• Privacy details
• Security policy
• Contributing guide
• Changelog

Bug reports and focused pull requests are welcome. Please follow the issue templates so logs and authentication data stay safely redacted.

License and trademark notice

Codex Login Manager is available under the MIT License. It is an independent community project, not an official OpenAI product and not affiliated with or endorsed by OpenAI. ChatGPT, Codex, and OpenAI are trademarks of their respective owners.