Allow restricting making CLI network requests only to certain ports on the proxy

Open 💬 0 comments Opened Jul 31, 2026 by cirosantilli

What variant of Codex are you using?

CLI

What feature would you like to see?

I want to allow codex to access certain localhost ports but not others. This is because some servers can give wide system access which I want to prevent.

On codex-cli 0.146.0 I can control access to only certain domains with:

[permissions.workspace_custom.network]
enabled = true
allow_local_binding = true

[permissions.workspace_custom.network.domains]
"localhost" = "allow"
"127.0.0.1" = "allow"

but it does no seem possible to select specific ports only, e.g. localhost:8000?

Additional information

_No response_

View original on GitHub ↗