Connect ChatGPT & Codex to Firezone

Use directory OAuth to install the Firezone plugin, or connect Codex directly through MCP. Both methods require a Firezone admin account. See the AI & MCP overview for permissions and supported operations.

Method 1: Directory OAuth

Install the Firezone plugin in ChatGPT or Codex.

1. Open the Firezone plugin in ChatGPT on the web or in the ChatGPT desktop app.
2. Select the + button to install it.
3. When prompted to connect Firezone, enter your Firezone Cloud US account slug if requested, then sign in with your usual method. The prompt may appear during installation or when you first use the plugin.
4. Review the permissions, then select Connect. Select write permissions only for the operations you want the assistant to perform.
5. Start a new chat in ChatGPT or Codex. Ask it to use Firezone to list your Sites, then check the result against the admin portal.

You can also type @ in a chat to select the Firezone plugin explicitly. If your workspace blocks installation, ask your workspace admin to enable it.

In Codex CLI, run codex, enter /plugins, and install Firezone. Complete the same sign-in and consent flow, then start a new session to use the plugin. See the OpenAI plugin documentation for supported surfaces and installation details.

Method 2: Codex with MCP

This method supports Firezone Cloud US and EU. In a terminal, run the command for your account's region.

For Firezone Cloud US:

codex mcp add firezone --url https://rest-api.firezone.dev/mcp

For Firezone Cloud EU:

codex mcp add firezone --url https://eu.rest-api.firezone.dev/mcp

1. Start the OAuth sign-in flow:

   codex mcp login firezone
   

2. In the browser, enter your account slug if prompted, then sign in with your usual method.

3. Review the permissions, then select Connect. Select write permissions only for the operations you want Codex to perform.

4. Start a new Codex session. Run /mcp to check the connection, then ask Codex to list your Firezone Sites and check the result against the admin portal.

For configuration details, see the Codex MCP documentation. For other MCP clients, see the Universal MCP guide.

Disconnect ChatGPT or Codex

1. In the Firezone admin portal, select your user avatar in the upper right, then select Your settings.
2. Under Connected apps, find the connection and select Disconnect.

Credentials created through the connection remain valid after disconnection. Revoke any Client or Gateway tokens you no longer need separately.

Need help? See all support options.