01 / behavior
Agent
The model, system prompt, tools, MCP servers, and skills that define how Codex behaves.
Private early access
Codex Managed Agents is rolling out privately. Join the waitlist to share your workflow, and we will reach out as we open early access for teams that need secure tool execution, cloud environments, and long-running Codex sessions.
What you are signing up for
Model + tools
Define Codex behavior once.
Container template
Bring packages, files, and access rules.
Execution runtime
Combine the agent and environment for a live task.
App I/O
Send instructions in and stream tool/status updates out.
Core concepts
Agent, Environment, Session, and Events remain the core vocabulary of the system. Even in private rollout, they are the fastest way to understand what the product is designed to run.
01 / behavior
The model, system prompt, tools, MCP servers, and skills that define how Codex behaves.
02 / runtime
A configured container template with pre-installed packages, mounted files, and network rules.
03 / execution
A running agent instance inside an environment, working on a concrete task and producing outputs.
04 / control plane
Messages flowing between your application and the agent, including user turns, tool results, and status updates.
When access opens
Once you have access, the workflow stays intentionally small: define Codex behavior, choose the runtime, launch a session, and keep steering it through events while the infrastructure stays managed.
Set the model, prompt, tools, MCP servers, and skills once, then reuse the agent definition across tasks.
Choose the cloud container template with the packages, files, and access controls your workload needs.
Start an execution that binds the chosen agent and environment for a specific task.
Send user input as events while Codex streams back status updates, tool calls, and outputs over SSE.
Interrupt, redirect, or refine the session without rebuilding the whole runtime loop.
Who should join
Codex Managed Agents is not just a UI wrapper around a model. It is a runtime layer for workloads that need time, tools, isolation, and a memory of what already happened, which is exactly what the waitlist helps us prioritize.
Handle workloads that span minutes or hours and require multiple coordinated tool calls.
Run inside managed containers with pre-installed packages, mounted files, and explicit network access.
Skip building your own agent loop, sandbox, and tool orchestration layer from scratch.
Keep a persistent file system and conversation history across multi-turn tasks and retries.
Waitlist open
We are onboarding teams with real agent workflows first. Share your use case through the waitlist, then browse the docs while you decide how Codex Managed Agents could fit into your stack.