Skip to main content
Kin
Start free
Menu

Guides

codex mcp login, once for every service.

I run Codex over SSH. codex mcp login wants a browser that computer doesn't have, and I don't want a separate login for every MCP server.

Add Kin to Codex, then run codex mcp login kin. On a computer without a browser, add --no-browser, open the address it prints anywhere, approve, and paste back the address your browser lands on. One sign-in covers every service in Kin.

Steps checked in Kin on .

Start freeSee plans

Free for 5 connections and 2 AI apps. No card needed.

Set it up

  1. Add Kin to Codex

    Run the command below, or add the same server to ~/.codex/config.toml yourself. Codex setup

    codex mcp add kin --url https://app.kinlab.ai/mcp

  2. Sign in

    On a computer with a browser, Codex opens Kin's sign-in. If it doesn't, run codex mcp login kin.

    codex mcp login kin

  3. No browser? Paste the address back

    Add --no-browser. Codex prints a sign-in address. Open it on any computer, sign in to Kin, choose what Codex may use and approve. Copy the full address your browser lands on, even if the page doesn't load, and paste it into the terminal.

    codex mcp login kin --no-browser

  4. Check it

    The Auth column for kin should read OAuth.

    codex mcp list

What we ran.

Codex CLI 0.165.0, with no browser, against a test Kin. codex mcp login kin --no-browser found Kin's sign-in on its own and printed the address. Kin's window named the app Codex and offered Can only read. After we approved and pasted the address back, Codex printed "Successfully logged in to MCP server 'kin'" and codex mcp list showed OAuth.

One login. Every service.

Kin had GitHub, Exa and Hugging Face connected. With that one sign-in, Codex found reads on all three, and because we chose Can only read, Kin offered it no change anywhere. Connect another service in Kin later and Codex has it, with no new login.

Questions

Visit the help center
What callback address does Codex use?

Codex waits on your own computer, at an address like http://127.0.0.1:63392/callback; the port varies. Kin accepts it. If that page can't load, as on a remote machine, paste the address into the terminal instead.

Which client ID does Codex send?

In our run, Codex sent a web address as its client ID, https://chatgpt.com/oauth/codex/client.json, and Kin's sign-in named it Codex. You don't register anything first.

Can I use a token instead?

Yes. Make a token for Codex under AI apps in Kin and add Kin with --bearer-token-env-var. Codex setup

What if the login says "missing required issuer"?

Update Codex, then run codex mcp login kin again.

Their models. Your rules.

Start free

Free for 5 connections and 2 AI apps. No card needed.