Codex 0.147 adds --approve-for-me flag for auto-approved runs
The same drop brings cross-catalog plugin search, the opt-in MCP 2026-07-28 protocol, and secret-redacted transcripts — as Claude Code counters with /teleport.
Copy markdown
Auto-approvals land in the CLI
The new `--approve-for-me` flag lets Codex automatically review and approve trusted actions, so headless and CI runs stop stalling on manual confirmation prompts. It ships alongside stricter plugin isolation that denies network access if a policy update fails.
One search across every plugin catalog
0.147 installs portable Agent Plugins and searches local, personal, workspace, and remote catalogs at once. It also imports Cursor-managed skills and syncs your Claude and Cursor conversations without creating duplicates.
MCP 2026-07-28, opt-in
The new protocol adds paginated tool discovery, multi-round requests, and non-blocking server startup — so a slow MCP server no longer holds up Codex launching, and huge tool catalogs page in instead of timing out.
Secrets scrubbed from your history
Codex now redacts secrets and full bearer tokens from displayed commands and replayed conversation history, making sessions far safer to screen-share, paste, or replay.
Claude Code 2.1.223 counters with /teleport
Anthropic's CLI shipped `claude --teleport <session id>` to continue a session locally, plus owner-wildcard (`owner/*`) marketplace allowlists and patches for a Bash permission bypass and a dynamic-import() sandbox escape.
Bedrock gets remote compaction
Amazon Bedrock deployments now receive cached web search and remote conversation compaction, trimming token bloat and cost on long agent runs.