CLI Reference

CLI reference

These are the public commands in the v2.3.9 release binary's --help output. Run codexify <command> --help for the installed build's authoritative options. Help does not start the service.

Commands

Command	Purpose
codexify	Run the MCP server in the foreground.
codexify quickstart	Configure project scope, native tunnel, plugin, and service.
codexify chat	Print the verified private URL for the running owner-chat interface. Treat the URL as a credential.
codexify doctor [--json]	Read-only installation, config, dependency, service, tunnel, and companion diagnostics.
codexify update	Download and verify the latest release; schedule replacement of the standard managed executable.
codexify config …	Inspect or edit the selected JSON file.
codexify projects list …	Inspect selectable projects without starting MCP/tunnel/upstream processes.
codexify service …	Manage the native per-user server supervisor.
codexify browser …	Install and manage the separate browser companion.

Server options

CLI values override the selected configuration. Config selection is --config, then non-empty CODEXIFY_CONFIG, then the user config under ~/.codexify, then built-in defaults. An explicitly selected missing file uses defaults rather than falling back to another file.

Option	Meaning
--work-dir <DIR>	Existing project access root; required when the config has no usable workDir.
--config <PATH>	Select the global JSON file.
--project-clone-dir <DIR>	Existing clone destination inside the access root; defaults to that root.
--worktree-mode auto|always|never	Policy for new worktree selections.
--worktree-root <DIR>	Root for managed worktrees.
--port <PORT>	MCP listener port; default 3000. Agent chat has its own port.
--api-key <KEY>	Static bearer for non-native HTTP; incompatible with native tunnels. Keep shell history exposure in mind.
--codex-cli	Require successful Codex CLI MCP discovery instead of tolerating its failure.
-v, --verbose	Debug diagnostics; repeat for trace. --log-tool-calls is an alias.
--log-tool-payloads [MODE]	off, requests, responses, or all; a bare flag means all.
--tool-log-level <LEVEL>	trace, debug, info, warn, or error.
--tool-log-max-request-bytes <N>	Request preview cap.
--tool-log-max-response-bytes <N>	Response preview cap.
--tool-log-redact-env <NAME>	Additional environment value to redact; repeatable.
--audit <FILE>	Select JSONL audit destination; alias --audit-log.
--audit-command-preview	Enable bounded, redacted command previews.
--audit-redact-env <NAME>	Additional audit command redaction; repeatable.
--openai-tunnel-id <ID>	Enable a single native tunnel.
--openai-tunnel-api-key-ref <REF>	env:NAME or file:/path; default reference env:CONTROL_PLANE_API_KEY.
--openai-tunnel-client <PATH>	Compatible official client binary instead of managed download.
--openai-tunnel-organization-id <ID>	Optional Platform organization ID.

Workspace selection is always available. The legacy --multi-project flag and multiProject key remain accepted for compatibility but cannot disable it; new setup instructions need neither. There is no need to create one server process per repository.

Configuration commands

codexify config path
codexify config
codexify config get agentChat.enabled
codexify config set agentChat.automation.automaticRetries false
codexify config unset instanceName
codexify config edit

config/get print raw stored JSON, not a fully expanded effective configuration. They can expose saved credentials; do not post their output unredacted. Missing files print {} without being created. Escape dots/backslashes in literal key names.

set stores valid JSON as JSON and other input as a string. Mutations preserve unrelated fields and permissions, refuse unsafe file targets, migrate old schemas with backup, and atomically replace the document. edit uses a validated staging copy through VISUAL, EDITOR, or the platform fallback editor. Restart the service when required to apply runtime changes.

Service commands

codexify service install
codexify service start
codexify service stop
codexify service restart
codexify service enable
codexify service disable
codexify service remove
codexify service status --json
codexify service logs -f

start/stop/restart preserve login enablement; enable/disable change it. Status reports the current user's native supervisor, independent of config validity. Its exit codes are 0 running, 3 installed but stopped, 4 not installed, 1 query failed. Supervisor running state is distinct from MCP/tunnel readiness.

Browser commands

codexify browser install
codexify browser start
codexify browser stop
codexify browser status --json
codexify browser login
codexify browser reveal

install selects the companion matching this server release. start and stop do not replace the server service; an explicit browser stop persists across server restarts. login reveals sign-in, and reveal shows the existing shared window. The status JSON includes actual build and authentication state; a healthy compatible runtime can be older than the server. Update server and companion together when release notes require it.

Project catalogue

codexify projects list --work-dir /path/to/projects
codexify projects list --work-dir /path/to/projects --query app --limit 50
codexify projects list --work-dir /path/to/projects --json
codexify projects list --work-dir /path/to/projects --show-skipped

--limit accepts 1–200 (default 200). The local-only --show-skipped includes diagnostic paths and merged candidates; normal model-facing results omit those rejected paths. Listing does not bind a workspace or read project contents.

Updating and diagnostics

codexify update verifies before interruption, avoids downgrades, and restarts a service only when it was running. Source/nonstandard installations need their normal installation procedure. Browser installation is separate. See Installation.

codexify doctor --json is read-only: it does not start bridged servers, install a service, repair files, or open browser conversations. Use Troubleshooting to interpret the checks.

New defaults include debug metadata, payload logging, and audit command previews. See Audit logging for redaction and explicit opt-outs.

---

Reviewed against v2.3.9 on 22 October 2026. Source: src/config.rs · src/main.rs.