Atbash Safety checks supported Codex tool calls against your Atbash agent's safety policy before execution. The package includes a local PreToolUse hook, the bundled production Atbash SDK, and a setup and troubleshooting skill; it does not use an MCP server.
Requires a supported local Codex environment, Node.js 22.13 or newer, an Atbash account with a registered agent, and network access to Atbash services. Configure your agent private key and exact organization name in the local Atbash configuration file, then explicitly review and trust the hook in Codex. Never paste private keys into chat.
Once configured, enabled, and trusted, the hook sends tool-call details through the SDK to Atbash for a judgment. ALLOW permits the pending call; HOLD, BLOCK, and handled configuration or service errors deny that attempt. Coverage is limited to tool calls exposed to Codex's PreToolUse lifecycle; ordinary Chat, plain-text replies, and tools outside that lifecycle are not protected.
Source and setup instructions: https://github.com/Atbash-Ai/atbash-chatgpt-plugin
Install
- 1Add it in ChatGPT
Open Plugins in the ChatGPT sidebar (web or desktop), search for “Atbash Safety” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.
Skills 1
- Set Up Atbash
Configure and verify local Atbash safety
Things to ask
- “Use $atbash-setup to configure Atbash without sharing my private key.”
- “Verify that Atbash safety is active for this task.”
- “Explain why Atbash blocked or held the last tool call.”
Disconnect or uninstall
- 1In ChatGPT
Disconnect an account in Settings → Apps or Plugins. To remove the plugin itself, open Atbash Safety in the Plugin Directory and select Uninstall plugin. Uninstalling can disconnect every account connected through it, and plugins your workspace installs may not offer the option.
- 2In Codex
Run /plugins in the Codex CLI, select the plugin and uninstall it, or press Space to turn it off.