AI Agent Hub
Back to plugins
🧩

dsh-openai-codex-oauth

admin-security Updated 2026.08.15

Run the following command in DeepSeek Harness:

dsh plugin install dyuan311/dsh-openai-codex-oauth

Paste the following prompt into your AI chat to install this plugin:

Run dsh plugin install dyuan311/dsh-openai-codex-oauth to install this plugin in DeepSeek Harness; the source is available at https://github.com/dyuan311/dsh-openai-codex-oauth.

About this plugin

DeepSeek Harness does not ship a built-in OAuth flow for the openai-codex provider, so subscribers who want to call Codex models from within Harness have been forced to juggle access tokens manually—cumbersome and fragile once a token expires. dsh-openai-codex-oauth closes that gap by wrapping the full OAuth 2.0 Authorization Code with PKCE browser flow inside Harness, letting any ChatGPT subscriber sign in once and immediately pick an openai-codex model from the model selector.

The plugin exposes three straightforward slash commands: /codex-login kicks off a browser or device-code authorization and persists the credential automatically, /codex-status reports the token source and expiry at a glance, and /codex-logout wipes the local credential in one step. The OAuth credential and access token are written to ~/.dsh/.credentials.yaml with file permissions scoped to the current user, and the pi-ai library handles transparent token refresh so sessions keep working without re-login.

Ideal for individual developers or team admins who already hold a ChatGPT subscription with Codex access and want key-free, automatically renewing model integration inside DeepSeek Harness. The project is community-maintained under the MIT License and is not an official OpenAI or DeepSeek distribution.

Use Cases

  • One-click browser OAuth sign-in to the OpenAI Codex subscription inside DeepSeek Harness
  • Eliminate manual token pasting and refreshing with automatic token renewal in long sessions
  • Team admins distribute Codex model access without exposing static API keys

Best For

  • Individual developers with a ChatGPT subscription that includes Codex access
  • DevOps or platform engineers who need key-free, auto-renewing Codex model calls
  • Engineering teams using DeepSeek Harness and wanting to plug in an external subscription model