Approve Codex CLI permission requests remotely

• A PermissionRequest hook sends Codex's permission requests to handup when Codex asks for escalation.
• The handup MCP server lets Codex ask on its own before risky steps.
• A denial with a note reaches Codex as the decision message, for example "Use staging instead".

1. Install handup

   On glibc Linux or macOS, use the install script below. On Alpine, use the musl APK package from the downloads page instead. On Windows, download the desktop EXE or CLI ZIP instead of running the install script: the desktop app starts the daemon, or run handup serve in its own terminal for the CLI ZIP. The service command below is Linux/macOS only. (handup setup starts handup and connects every agent it finds in one go; Windows has no background service.)

   curl -fsSL https://github.com/gethandup/handup/releases/latest/download/install.sh | shCopy
   handup service install # Linux/macOS only; on Windows run handup serveCopy

2. Connect Codex

   Preview, then install the hook and the MCP server into $CODEX_HOME (default ~/.codex). Other handlers are kept and changed files are backed up.

   handup integrate codex --dry-runCopy
   handup integrate codexCopy

3. Trust the hook and run Codex

   Codex asks you to review the new hook; approve it. Then run Codex with an approval policy that asks.

   codex --sandbox workspace-write --ask-for-approval on-requestCopy

• Bash requests show the command; other tools show their input as JSON.
• Requests carry the Codex session ID and working directory.
• Approve, or deny with feedback. Codex gets allow or deny; this hook cannot rewrite the tool call.
• If the daemon is unreachable, Codex keeps its own permission prompt. handup never approves as a fallback.

• The hook only runs when a command needs escalation, not for commands Codex's sandbox already allows.
• codex exec forces the approval policy to never, so use the interactive CLI for approval round-trips.
• Codex defaults to a 60-second MCP tool timeout; handup's wait_requests returns well inside it.

Full details: the Codex guide in the handup docs.