Search

approval_policy.granular.skill_approval: allow skill-script approval prompts.

allow_login_shell: allow login-shell semantics for shell tools.

default_permissions: choose a named permissions profile by default.

permissions.<name>.filesystem: define filesystem permissions profile.

permissions.<name>.filesystem.<path>: read/write/none for a specific path.

permissions.<name>.filesystem.":project_roots".<subpath>: scoped access relative to project roots.

permissions.<name>.network.enabled: enable network in that profile.

permissions.<name>.network.mode: limited | full.

permissions.<name>.network.proxy_url: HTTP proxy.

permissions.<name>.network.socks_url: SOCKS proxy.

permissions.<name>.network.enable_socks5: expose SOCKS5 listener.

permissions.<name>.network.enable_socks5_udp: allow UDP via SOCKS5.

permissions.<name>.network.allow_upstream_proxy: allow chained proxying.

permissions.<name>.network.allowed_domains: network allowlist.

permissions.<name>.network.denied_domains: network denylist.

permissions.<name>.network.allow_unix_sockets: allow specific Unix sockets.

permissions.<name>.network.allow_local_binding: allow local bind/listen.

permissions.<name>.network.dangerously_allow_non_loopback_proxy: allow non-loopback proxy listener.

permissions.<name>.network.dangerously_allow_all_unix_sockets: allow arbitrary Unix sockets.

sandbox_workspace_write.writable_roots: extra writable roots in workspace-write mode.

sandbox_workspace_write.network_access: network access inside workspace-write mode.

sandbox_workspace_write.exclude_tmpdir_env_var: remove $TMPDIR from writable roots.

sandbox_workspace_write.exclude_slash_tmp: remove /tmp from writable roots.

profile: default named profile at startup.

profiles.<name>.*: profile-scoped overrides.

profiles.<name>.service_tier: per-profile tier.

profiles.<name>.plan_mode_reasoning_effort: per-profile plan reasoning.

profiles.<name>.web_search: per-profile search mode.

profiles.<name>.personality: per-profile personality.

profiles.<name>.model_catalog_json: per-profile model catalog.

profiles.<name>.model_instructions_file: per-profile instruction file.

profiles.<name>.experimental_use_unified_exec_tool: legacy unified-exec alias per profile.

profiles.<name>.oss_provider: per-profile OSS provider.

profiles.<name>.tools_view_image: per-profile image tool toggle.

profiles.<name>.analytics.enabled: per-profile analytics.

profiles.<name>.windows.sandbox: per-profile Windows sandbox.

plan_mode_reasoning_effort: dedicated reasoning setting for Plan mode.

model_providers.<id>.name: custom provider display name.

model_providers.<id>.base_url: custom provider base URL.

model_providers.<id>.env_key: env var for provider API key.

model_providers.<id>.env_key_instructions: setup guidance for provider key.

model_providers.<id>.experimental_bearer_token: direct bearer token; documented as discouraged.

model_providers.<id>.requires_openai_auth: whether provider uses OpenAI auth.

model_providers.<id>.wire_api: protocol; docs say only responses.

model_providers.<id>.query_params: extra query params.

model_providers.<id>.http_headers: static request headers.

model_providers.<id>.env_http_headers: headers from env vars.

model_providers.<id>.request_max_retries: HTTP retry count.

model_providers.<id>.stream_max_retries: SSE retry count.

model_providers.<id>.stream_idle_timeout_ms: SSE idle timeout.

model_providers.<id>.supports_websockets: whether Responses WebSocket transport is supported.

features.codex_hooks: under-development lifecycle hooks.

features.shell_tool: enable shell tool; stable and on by default.

features.enable_request_compression: zstd-compress streaming request bodies; stable and on by default.

features.skill_mcp_dependency_install: prompt/install missing MCP deps for skills; stable and on by default.

features.fast_mode: enables Fast mode selection; stable and on by default.

features.smart_approvals: experimental guardian-reviewer approval routing.

features.web_search: deprecated old toggle; prefer web_search.

features.web_search_cached: deprecated old toggle mapping to cached mode.

features.web_search_request: deprecated old toggle mapping to live mode.

experimental_use_unified_exec_tool: deprecated legacy alias for unified exec.

suppress_unstable_features_warning: hide warning when under-development features are enabled.

shell_environment_policy.inherit: baseline env inheritance, all | core | none.

shell_environment_policy.ignore_default_excludes: keep KEY/SECRET/TOKEN vars before filtering.