Proves the chain: browser → Node.js → child process → Codex CLI → response.
Access token
This POC spends real model quota, so the API is token-gated. Paste the POC_TOKEN (printed in your Hostinger app log at startup).
Checking Codex…
Waiting for the access token.
1
Open this link on any device where you can sign in to ChatGPT: …
2
Enter this one-time code (expires in 15 minutes):
…
3
Approve the sign-in. This page detects it automatically.
Waiting for approval…
Only continue if you started this sign-in from this page. If someone
sent you this code, cancel — entering it would link your ChatGPT account to
their server.
…
No messages yet.
Locked.
Sandbox: Codex runs with its shell/exec tools disabled, a read-only sandbox, and an empty
scratch directory as its working root — so it has no way to read or modify files on this server.
Note that -s read-only alone only blocks writes; disabling the shell tool is what
removes filesystem access. Setting CODEX_ALLOW_SHELL=1 re-enables the shell and gives up this guarantee.