Tools
Codex now gates MCP tool calls behind a Touch ID signature from a Secure Enclave key
Two PRs 5 hours apart complete the chain: #43624 (merged 2026-09-08T00:15Z) implements macOS user verification with P-256 Secure Enclave keys in the Data Protection Keychain, requiring biometric auth via the key's access-control policy and a fresh LAContext per signature; #43712 (05:41Z) stops the TUI auto-cancelling MCP user-verification requests and routes approvals through the app-server's userVerification/verify RPC, returning the proof to the original request. Remote workspaces are still unsupported. This is hardware-backed per-call approval for agent tool use, not a config flag.
Source
↳ Follow the thread