The sharp edges, answered.
Mostly about security. Sometimes about fish.
Is this a Pokémon thing? +
No. It's poke as in the Hawaiian bowl, plus Codex. Pokedex is a developer tool: a recipe for Poke that bridges it to the Codex agent on your machine. No catching involved.
Does Poke get access to my computer? +
No. Poke never gets direct shell access and can't pick arbitrary filesystem paths. It can only call typed MCP tools, and the local agent decides what's allowed. Codex always works inside workspaces you've authorized.
Can Poke see my file paths? +
No. Projects are exposed through workspace aliases. Poke works with logical names like pokedex; real paths like /home/user/projects/pokedex never leave your machine.
What does "read-only by default" mean? +
Out of the box, Codex can read your code — analyze, plan, review — but cannot modify any file. Write access (workspace_write) has to be explicitly configured, per workspace.
What is danger_full_access? +
The escape hatch, and it's locked twice: it stays disabled unless you explicitly permit it both in the agent configuration andin the individual workspace. If you're not sure you need it, you don't.
Do I need to open ports or set up a server? +
No. The local agent connects outboundto the relay via WebSocket. Your machine never accepts inbound connections, so there's nothing to expose and nothing to port-forward.
What does the relay actually see? +
The relay validates authentication and forwards typed requests between Poke and your agent. It never works on your files directly. Transcripts that travel back are redacted.
Which Codex features are supported? +
Task launch and continuation, plan mode, review mode, usage tracking, model selection, reasoning/verbosity/speed controls, sandbox and approval policy, and web search control are stable. Skills, goals and cloud apply run through adapters or local config. Anything not exposed by stable Codex APIs is declared unavailable — never simulated.
Is it open source? +
Yes — the whole bridge, relay and agent. Read the code, run your own relay, open issues, send PRs.