
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
codex-usage-profile
Advanced tools
Submit the account usage shown by Codex to your GitHub-backed Codex Usage Profile and receive stable profile, card, and README links.
Run this on the machine where Codex is signed in:
npx codex-usage-profile@latest submit
If a service credential is not stored yet or is no longer valid, submit guides you through browser approval and continues in the same terminal after approval. npm may first ask you to confirm the package and version before installation.
After submission:
Interactive runs may optionally ask whether you want to star the project. Declining does not affect submission, and the prompt is skipped in CI and non-interactive runs.
codex CLI on PATH, or on macOS a standard ChatGPT.app or Codex.app installationaccount/usage/readAPI-key-only and Bedrock authentication do not provide the account usage method used by this CLI.
| Command | What it does |
|---|---|
npx codex-usage-profile@latest submit | Sign in through browser approval when needed, then read and submit current Codex usage |
npx codex-usage-profile@latest login | Check the saved service login and start browser approval when needed |
npx codex-usage-profile@latest status | Show the connected account and latest submission metadata |
npx codex-usage-profile@latest logout | Remove the locally stored service credential |
npx codex-usage-profile@latest --help (-h) | Show all commands; add --help after a command for its supported options |
npx codex-usage-profile@latest --version (-v) | Show the installed CLI version |
logout removes only the local credential file. Revoke the server token from web Settings when a machine is no longer trusted.
An account can have up to three active CLI/API tokens. If the limit is reached, revoke an older Device login token in web Settings, then retry with a new code.
A successful interactive submit returns copyable profile, card, and README values:
✓ Usage submitted successfully.
Captured: 2026-07-11T00:00:00.000Z
Links
Profile: https://codex-usage-profile.meleeisdeveloping.chatgpt.site/?view=profile
Card: https://codex-usage-profile.meleeisdeveloping.chatgpt.site/u/octocat/card.png
README: <a href="https://codex-usage-profile.meleeisdeveloping.chatgpt.site/api/share/octocat"><img width="50%" src="https://codex-usage-profile.meleeisdeveloping.chatgpt.site/u/octocat/card.png" alt="Codex usage profile" /></a>
Supported interactive terminals show the Profile and Card URLs as clickable links. The README value remains exact plain HTML so it can be copied without terminal control sequences.
The README link and image source stay fixed after future submits. The website uses revisioned links for new social posts without changing this Markdown.
The CLI sends one Account Usage Contract v1 document containing:
It does not send Codex/OpenAI credentials, GitHub OAuth credentials, prompts, responses, tool data, local session files, or filesystem paths. GitHub identity and profile visibility remain server-owned.
Browser approval stores a narrow service credential in the operating system's user configuration directory. On macOS and Linux, the directory and file use owner-only permissions. logout removes the local file; it does not revoke the server token or unset an environment-provided token.
For trusted non-interactive automation, inject a pre-issued token through a secret manager, pin the CLI to an exact version, and request JSON output:
CODEX_USAGE_PROFILE_TOKEN='<service-submit-token>' \
npx --yes codex-usage-profile@0.1.4 submit --json
Do not put the token in command arguments, URLs, repository variables, logs, or shell history.
MIT. This independent community project is not affiliated with, endorsed by, or sponsored by OpenAI. OpenAI and Codex names and trademarks belong to their respective owners.
FAQs
Connect local Codex usage to a Codex Usage Profile.
The npm package codex-usage-profile receives a total of 45 weekly downloads. As such, codex-usage-profile popularity was classified as not popular.
We found that codex-usage-profile demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.