Network and web search

Part 10 of 17

Codex has two separate network switches, and you need both:

Command network: off by default. When a task needs a package registry, turn it on in the profile together with [features] network_proxy = true; without the proxy, the profile’s domain list doesn’t restrict anything.
Web search: cached by default, which serves results from an OpenAI-maintained index. Keep it there, or set disabled on native Windows and regulated repositories; avoid live and --search for routine work.

The proxy filters commands only. Web search, MCP servers, connectors and browser traffic each have their own controls (Codex docs).

/* Without JS the drawer cannot open, so show the sidebar inline instead. */ @media (max-width: 900px) { .sidebar { position: static; transform: none; width: auto; box-shadow: none; } .navbar-toggle, .sidebar-head { display: none; } }

Security for Codex Development: Network and web search

Network and web search