What is CodexAccountBridge?
CodexAccountBridge (cab) is an open-source Codex account manager for macOS and Linux. It combines a command-line tool with a native SwiftUI app to help you juggle multiple official Codex or ChatGPT logins across local machines, SSH servers, remote projects, and supported agent services. Each login lives in its own isolated CODEX_HOME, while authentication and model traffic flow through the official Codex executable — no shortcuts, no credential merging.
Who it's for
- Multi-account developers who run personal and work Codex logins side by side and need clean separation without logging in and out repeatedly.
- Remote and SSH power users who manage Codex on headless Linux servers or remote projects and want device-login flows plus account control from a native macOS app.
- Security-conscious teams that require a conservative model where each account signs in independently, credentials are never read or copied, and no silent account switching happens after quota or errors.
Key features
Account management
Create, list, and switch between independent Codex accounts with simple commands like cab account add, cab use, and cab run. Removing a registration never deletes the underlying account directory, login, or session history.
Usage limit viewing
Check official Codex usage limits and reset windows for each account at a glance. Normal usage reads are display-only, and the optional usage-period wake is an explicit, opt-in minimal request — never an automatic rotation trigger.
SSH server management
Manage accounts on multiple SSH servers directly from the native macOS app. This extends your multi-account workflow beyond local machines to remote infrastructure without leaving the desktop interface.
Session isolation and service binding
Preserve or isolate project and session history during deliberate account changes, with opt-in cross-account session sharing that excludes credentials and SQLite state. You can also bind supported Hermes and OpenClaw systemd user services to a chosen Codex account and configure a visible launch rotation order.
What stands out
Conservative security model: each account logs in independently and never reads or copies auth.json.
CAB deliberately avoids implementing OAuth, proxying model requests, inspecting token contents, or reacting to quota limits and errors. The official codex executable is invoked directly — no shell, no argument rewriting — and Codex approval, sandbox, and project-trust defaults stay untouched. Configuration updates are locked, atomic, permission-restricted, and recoverable from backups, making this one of the most boundary-respecting account managers available.
Worth checking out if…
You run multiple Codex or ChatGPT logins and want strict credential separation with a native macOS experience, or you manage Codex across SSH servers and remote projects and need explicit account control without automation that silently switches identities. It's also a strong fit if you value a security model that treats auth.json as untouchable and keeps every login flow official.
