Credentials. The employee API key is stored in plain text in config.toml, so restrict access to that file on the user's machine.
Who it is forA developer whose team uses Codex and has been issued an employee API key from a running Subpool instance.
The problemCodex on each machine normally connects directly to a provider, so the team cannot route work through shared capacity.
The outcomeCodex sends requests to Subpool's /v1 endpoint with the employee key and uses pooled capacity.
What you need first
- Docker Engine and Docker Compose installed
- openssl available to generate secrets
- AI subscription or API accounts that you are authorized to manage
- Administrator credentials for a running Subpool console (set in .env)
Steps
- In the Subpool console, create an employee API key for the pool and copy it.
- Create the
.codexdirectory andconfig.tomlfile in your home directory if they do not exist. - Add the
model_provider = "subpool"settings and the[model_providers.subpool]block, settingbase_urlto your Subpool URL followed by/v1andexperimental_bearer_tokento your employee key. - Save the file, then restart Codex so the new provider and WebSocket settings load.
Prompt for your agent
Using the gesta-run/subpool repository, update the user-level Codex config file at <config path> so the subpool provider points to <Subpool URL>/v1 with the employee key supplied by <admin>. Expected output: a valid config.toml containing the [model_providers.subpool] table. Verify that the file parses as TOML and that base_url ends in /v1 before reporting success.
Caveat. Subscription accounts use a dedicated upstream WebSocket while GitHub Copilot and OpenAI-compatible accounts use the HTTP/SSE bridge, so behavior differs by account type.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for gesta-run/subpool and "Route each employee's Codex through the shared pool"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer