AGENTCODI brings Codex workflows directly to Android.
Run the Codex app-server, workspace, approvals, terminal and supported development toolchains directly on your Android device. No Termux, WebView shell or separate gateway setup is required.
AGENTCODI lets you work with Codex through a native Android interface. Start or resume conversations, follow agent activity live, inspect commands and file changes, respond to approval requests and work with real project files directly on your phone or tablet.
FEATURES
• Native Codex interface for Android
• Start, resume, archive, restore and delete conversations
• Live streaming of messages, plans, reasoning summaries, commands, file changes and tool activity
• Private project workspace
• File and folder browser
• Text, image and binary file previews
• Import files through the Android document picker
• Export individual files or complete folders as ZIP archives
• Interactive terminal with live output and keyboard input
• Built-in Node.js, npm, Python and ripgrep toolchains
• Model and reasoning-level selection
• Account quota information
• Native approval and input dialogs
• MCP server, tool, skill and app inspection
• Expert Mode for supported MCP server configuration
• GitHub and Gmail integration through supported Codex apps
• ChatGPT sign-in or OpenAI API key authentication
• English and German interface
• Light and dark themes
ANDROID SANDBOX
Protected Mode uses AGENTCODI's Android sandbox backend integrated directly into its custom Codex runtime.
Sandboxed commands are supervised through seccomp and ptrace. Codex can work inside the permitted workspace while filesystem access outside the granted boundary is blocked.
Before a protected command is executed, the runtime verifies that syscall interception is actually working on the device. If sandbox enforcement cannot be verified, execution is refused instead of silently continuing without protection.
AGENTCODI 0.7.2 also includes Just-in-Time permissions enforced directly inside the Codex app-server. Permission profiles can therefore be applied at runtime before protected operations are executed.
Approval requests remain under user control and are shown directly inside the native Android interface.
A clearly marked Compatibility Mode is available for devices where the protected sandbox cannot be used. This mode intentionally provides less filesystem isolation.
NATIVE ANDROID RUNTIME
The Codex app-server, workspace, terminal and packaged command-line tools run locally on the Android device.
The AI model itself is not included in the APK. Model requests still require an internet connection and valid OpenAI authentication.
REQUIREMENTS
• Android 10 / API 29 or newer
• ARM64 device
• Internet connection for Codex model requests
• ChatGPT account or OpenAI API key
OPEN SOURCE
AGENTCODI is an independent open-source project licensed under the Apache License 2.0.
Source code, documentation, releases and issue tracker:
https://github.com/Mcpasi/AGENTCODI
THIRD-PARTY LICENSES
AGENTCODI includes several open-source third-party components and runtime packages.
Complete copyright notices, license terms and third-party license texts are included directly inside the app through the Legal Notices screen.
These notices include, among others, the Codex runtime, Node.js and its bundled dependencies, npm, Python, ripgrep and Material Icons.
Latest Version
0.7.5Uploaded by
Mcpasi
Requires Android
Android 10.0+
Available on
McpasiCategory
Free Productivity AppReport
Flag as inappropriateLast updated on Sep 17, 2026
Import and export bug fix
- Hardened workspace imports by validating sanitized provider names before any file data is read, preventing credential-like filenames from bypassing the import guard.
- Fixed workspace archive file-limit accounting so files omitted during export no longer consume the regular-file limit.
Supervisor bug fix
- Fixed C++ app-server transport handling so a NUL byte inside a received transport chunk no longer causes valid JSON frames in the same chunk to be discarded.
- Fixed handling of in-progress imageGeneration items. Image-generation events without a result field are now accepted while still enforcing full validation once a result is present.
