codex
--remote-auth-token-env
Upstream:Not specifiedEvidence:empirical
No documented source captured yet
This flag is recorded on empirical evidence only — observed in the binary’s own help output at a named version, with the capture committed. No Codex documentation source has been captured for it. That is an absence we are reporting, not a gap we have filled: writing a documented level without a document would make this catalog exactly the thing it exists to replace.
Evidence
empiricalSessionFleet observed this directly.
the flag is present in the running binary's own help output at this version
Name of the environment variable containing the bearer token to send to a remote app server websocket
- Observed via:
codex --helpon 0.150.1- Retrieved:
- 2026-08-29T00:00:00Z
- Committed fixture:
evals/fixtures/capability-catalog/codex-0.150.1--help.txtsha256e8ecd554e6e3e870…
Security surface — the vendor's words, not our finding
security impact is a human judgement (plan §5) — this record carries the vendor's words and no verdict
Name of the environment variable containing the bearer token to send to a remote app server websocket
SessionFleet recommendation
None yet — this primitive has not been reviewed by SessionFleet.