Feature request: synced Codex skills and secure scoped secret vault
OpenAI Developer Community
May 18, 2026
Feature request: synced Codex skills and secure secret vault
I’d love to see Codex support account-synced skills/global instructions, plus a secure built-in secret vault for personal and team use.
Right now, custom skills and global agent instructions are local to one machine. It would be very useful if users could optionally sync selected skills across their Codex installations, with local-only as the default for sensitive workflows.
Even more valuable would be a Codex-native secret vault:
* Personal and team/enterprise scopes
* Per-project and per-repository access controls
* Just-in-time approval when Codex needs to use a secret
* Audit logs for which agent/session used which secret and when
* Automatic masking in chats, logs, patches, and terminal output
* Rotation support for expiring tokens
* Enterprise support for SSO, RBAC, SCIM, KMS/HSM, and bring-your-own-key
The key design principle would be: Codex should be able to use secrets without exposing them in the prompt or chat. Ideally, secrets would be provided as scoped capabilities rather than plaintext values.
This would remove a lot of everyday friction around API keys, GitHub tokens, cloud credentials, database URLs, CI variables, and local environment setup, while also improving security and auditability.
In short: synced skills would make Codex feel portable, and a secure secret vault would make Codex much safer and easier to use for real development workflows.
22:01
Discussion in the ATmosphere