OpenAI Codex 0.155 adds an experimental /voice command and Touch ID checks for MCP requests on macOS

OpenAI released rust-v0.155.0 of its Codex coding agent on 17 September. The tagged build adds an experimental /voice command inside the terminal interface, Touch ID prompts for MCP requests on supported Macs, and the ability to hide, archive, and delete tasks from the agents overview. The release page lists 106 pull requests since 0.154.

What the /voice command does

OpenAI describes the new command as "experimental /voice conversations with live transcripts and microphone controls on supported builds." Users start the mode inside the Codex TUI, speak the request, and read the transcription as it fills in. The company has not said which builds count as supported, and the feature ships behind an experimental flag.

The rest of the terminal interface picks up two smaller changes in the same release. The status row now carries a live reasoning summary while the agent is working, and each successful turn ends with the completion timestamp on screen. Both are visible without opening a separate log.

The MCP change on Macs

The release notes read: "Added Touch ID verification for MCP requests in local TUI sessions on supported Macs." Every request an MCP server sends the agent, when the session is running locally on a Mac with a Touch ID sensor, can now prompt the user to authorise it with a fingerprint.

That closes a specific gap. MCP is how Codex reaches other tools, and up to now nothing on the client side stood between a compromised or over-permissive server and the local machine. A fingerprint at the moment of the call gives a team a per-request record of who approved a tool run, and one that is hard to click through by mistake.

Task cleanup and the daemon

The agents overview screen adds three actions for finished or noisy work: hide it, archive it, or delete it, with confirmation on the delete path. Managed worktrees now show ownership information, so a team member can see whose local session created the tree before removing it.

Under the surface, the Codex app-server daemon gets configurable update schedules and a codex app-server daemon update command. Saved threads and active goals now recover after a daemon restart, so a crashed background process no longer costs the last session's state. Amazon Bedrock users get credential support from configured commands, with caching, expiration-based refresh, and automatic re-authentication on failure.

Bug fixes in the same release preserve prompts when compaction fails before a turn starts, resize tmux terminals cleanly, restore the transcript viewport on reattach, refresh OAuth tokens for MCP servers correctly, and block a Windows sandbox escape route.

Voice input and Touch ID both ship as opt-in controls that sit alongside the keyboard workflow. The release is available now on the Codex GitHub releases page and rolls into codex installations through the standard update path.

Source

Release: openai/codex rust-v0.155.0, 17 September 2026.