Connect Clam to Codex
One terminal command adds your Shell to Codex. Sign in to Clam, click Allow, and Codex can use your Gmail only as far as the Shell's rules allow. No Shell yet? Start with the Quickstart.
Codex talks to Clam over MCP, the standard way an AI agent plugs in an outside tool. Each Shell is its own MCP server, so a second Shell installs beside the first.
Connect Codex
Three ways in. Start with the first; the others are for when it doesn't fit.
The simplest path: one command, and Codex opens your browser to sign in. Pick this unless your machine has no browser.
-
Paste this in your terminal
On the Shell's Install tab, pick Codex and copy the command under Sign in from the terminal. It has your server name and address filled in. Then press Enter.
Terminalcodex mcp add <server name> --url <your Shell's address> -
Sign in to Clam and Allow
Your browser opens on Clam, asking to connect your Shell to Codex. Its window is titled "Let ChatGPT use a Shell". Sign in if you need to, then click Allow.
Then click Check connection on the Install tab.
For a machine with no browser, like a server you reach over SSH. The key works only for Codex, and you see it once. Codex reads it from a variable named after the server, so two Shells' keys never overwrite each other.
-
Paste these in your terminal
Copy the commands under Use a key on the Install tab. Copying creates the key and fills it in. Then press Enter. Put the first line in your shell profile too, so a new terminal window keeps the key.
Terminalexport <key variable>=<your key> codex mcp add <server name> --url <your Shell's address> --bearer-token-env-var <key variable> -
Open Codex and run /mcp
Run
/mcp. You should see your server in the list.
Then click Check connection on the Install tab.
For anyone who prefers editing the config file by hand. Same result as the terminal sign-in.
-
Add this block to ~/.codex/config.toml
Anywhere in the file. Create it if it isn't there.
TOML[mcp_servers.<server name>] url = "<your Shell's address>" -
Sign in to Clam and Allow
Start Codex. Your browser opens on Clam, asking to connect your Shell to Codex. Its window is titled "Let ChatGPT use a Shell". Sign in if you need to, then click Allow.
Then click Check connection on the Install tab.
Try it
With the starter policy from the Quickstart, ask Codex:
If Codex holds other mail tools, name the Shell in the prompt.
Remove access
Run codex mcp remove <server name>, or delete the block from config.toml. That only tidies Codex. Clam's removal is the one that counts: on the Install tab, under Connected agents, click Remove access for Codex. A sign-in stops at its next request; a key at once. More in Remove access.
Next steps
- Not in the /mcp list, paused, or lost access? Common issues & solutions
- Write your own rules
- Have Codex ask before it acts