Connect Codex CLI to Any API

Wire OpenAI Codex CLI to AgentOnboard Remote MCP. Scoped RS256 token exchange directly from terminal commands with zero host credential leakage.

Preferred: 1-Shot Setup Prompt

Paste this prompt directly into Codex CLI. It safely installs the agent skill and wires the Remote MCP endpoint:

I want to install the AgentOnboard skill and MCP server:

1. For skill, run:
npx skills add agentonboard/skills -g -a '*' -s '*' -y

2. For MCP, run the setup command (or in ~/.codex/config.toml):
codex mcp add agentonboard --url https://agentonboard.xyz/api/mcp --bearer-token-env-var AGENTONBOARD_API_KEY

3. API key setup:
Ask me for my AgentOnboard API key (starts with aon_live_). If I provide it, configure the server with my key. If I prefer not to provide it in chat, guide me how to set the key securely.

4. Once done, remind me: /mcp (or restart codex session) to load the get_token tool.
Rules: Never commit or echo the full API key into persistent files or chat logs.

Your secret key (aon_live_...) is configured directly on the client transport. It is never stored in Codex CLI’s persistent conversation history or prompt cache.

Alternative: Manual Setup

If you prefer to configure Codex CLI by hand without using the automated prompt:

1. Install the agent skill

Installs workflow instructions so Codex CLI understands auth.md discovery:

npx skills add agentonboard/skills -g -a '*' -s '*' -y

2. Add the Remote MCP server

Run in your terminal (replace <YOUR_API_KEY> with your live key):

codex mcp add agentonboard --url https://agentonboard.xyz/api/mcp --bearer-token-env-var AGENTONBOARD_API_KEY

3. Reload session

/mcp (or restart codex session) to initialize the new tools.

Verify connection

In your Codex CLI chat or terminal, ask:

Run the whoami tool and tell me which AgentOnboard account is connected.

Codex CLI will call the Remote MCP server and print your verified email:

{
  "email": "user@example.com",
  "key_prefix": "aon_live_abcd"
}

Frequently asked about Codex CLI

How does Codex pass the API key?

Codex CLI uses the --bearer-token-env-var flag to read your key from the AGENTONBOARD_API_KEY environment variable, keeping secrets out of command flags and config files.

Can Codex mint tokens for any domain?

Yes. Once authorized, Codex can mint tokens for any domain that accepts AgentOnboard. Each token is strictly scoped to the target domain's normalized hostname and expires in 5 minutes.

Ready to run Codex CLI with AgentOnboard?

Create an API key in your dashboard and paste the setup prompt. Takes less than two minutes.

Get your API key All agents