Question: Is using Codex OAuth tokens (auth.json) with openclaude safe from an OpenAI ToS perspective?

[tamerkanak]

Hi,

I'm a ChatGPT Business subscriber using openclaude with my Codex OAuth tokens from ~/.codex/auth.json for personal development purposes.

I'm aware that OpenAI has publicly endorsed the use of Codex subscription tokens in third-party tools (as stated by OpenAI's Thibault Sottiaux). However, I want to confirm:

1. Does openclaude send the auth.json token anywhere other than the configured OpenAI/Codex endpoint?
2. Is there any known risk of account suspension when using openclaude with a ChatGPT Team Codex subscription?
3. Are there any recommended precautions (e.g. token rotation, network monitoring)?

Using openclaude v0.1.4 on Windows 11 with OPENAI_BASE_URL set to https://chatgpt.com/backend-api/codex.

Thanks!