Give ChatGPT a real terminal on a real machine.
Zodex is a small MCP coding harness that gives ChatGPT the command, stdin, and patch primitives coding agents already know—without wrapping your development environment in a new abstraction.
Run it directly on a trusted Apple Silicon Mac, 64-bit Linux machine, or x86_64 Windows machine with Zodex Local, or use the same core execution tools on a wake-on-demand remote Linux workspace with Zodex Sprite.
Local puts ChatGPT on your trusted Linux, macOS, or Windows host through an OpenAI Secure MCP Tunnel. There is no public inbound port, proxy server, container, or separate remote machine between the model and the development environment you already use.
One Local runtime can serve multiple ChatGPT conversations at once. Zodex gives each conversation its own short Agent identity, keeps durable execution history, and lets you watch every command and file change in real time through the cross-platform browser Liveboard or terminal viewer.
- Your real environment — shell, Git, language toolchains, credentials, and files run as your logged-in user. Linux and macOS use the captured login shell; Windows Local executes commands through Windows PowerShell with the captured user environment.
- Four Local MCP tools — the three shared execution tools (
exec_command,write_stdin,apply_patch) plus optionalset_agent_aliasfor Liveboard naming. - Many Agents, one runtime — multiple ChatGPT conversations can work concurrently across repos and worktrees.
- Live observability — commands, output, diffs, process state, and Agent timelines in the browser Liveboard or terminal TUI.
- Durable history — inspect previous tool activity even after the viewer or Local runtime stops.
- Explicit lifecycle — start access when you want it, optionally give it a TTL, and stop it cleanly.
- Host-native controls — Linux, macOS, and Windows include Liveboard and a terminal viewer. macOS has a native Swift menu bar app; Windows and graphical Linux desktops have a lightweight Rust system tray. The menu/tray starts at login by default while Local remains off, with a separate opt-in Launch Tunnel at Login checkbox and
zodex local autostartterminal commands. Linux stores the tunnel key in a user-only credential file and Windows uses Windows Credential Manager.
Local is intentionally a trusted-host mode, not a sandbox. ChatGPT receives the same filesystem and developer-tool access your logged-in user has, subject to the host operating system's normal permissions.
Install the operator CLI on macOS/Linux:
curl -fsSL https://zodex.ashray.xyz/install.sh | bash
export PATH="$HOME/.local/bin:$PATH"On Windows PowerShell:
irm https://zodex.ashray.xyz/install.ps1 | iexSet up the Secure MCP Tunnel once:
zodex local setupThen start Zodex from the repo you want ChatGPT to see first:
cd ~/code/my-project
zodex local start --ttl 4hWatch the Agents work. Linux, macOS, and Windows open Liveboard by default:
zodex local watchAnd turn access off when you're done:
zodex local stopSee the Local quick start for tunnel setup, ChatGPT connection, menu-bar controls, history, configuration, and troubleshooting.
The core execution interface stays the same. You choose where it runs and which trust model you want. Local also provides agent-managed Liveboard aliases.
| Local | Sprite | |
|---|---|---|
| Host | Your Apple Silicon Mac, x86_64/aarch64 Linux machine, or x86_64 Windows machine | Wake-on-demand remote Linux Sprite |
| Connection | OpenAI Secure MCP Tunnel | Cloudflare Worker → Sprite |
| Trust model | Trusted host; your logged-in user | Restricted Agent account + isolated GitHub writer boundary |
| Lifecycle | Explicit start/stop, optional TTL | Automatic wake/sleep |
| GitHub access | Your existing local credentials | Review-first PRs, temporary push grants, or scoped YOLO |
| Observability | Linux/macOS/Windows Liveboard + TUI; durable history + HTTP/SSE API | Sprite service and operator diagnostics |
For an isolated remote workspace instead of trusted-host execution:
zodex sprite setup --helpSee the Sprite quick start.
ChatGPT sees three execution tools in both modes:
exec_command run a command in an explicit absolute workdir
write_stdin poll, interact with, or stop a running process
apply_patch edit files with the Codex-style patch format
Zodex Local only also offers set_agent_alias to name the current conversation's Liveboard column, for example Rindle implementation. This optional tool preserves the Agent's four-character identity, doesn't enter the command timeline, and pushes alias updates to every open Liveboard.
That is deliberately the whole abstraction. Zodex handles the runtime, interactive command I/O, process lifecycle, transport, observation, and host-specific security boundaries underneath it.
Full documentation lives at zodex.ashray.xyz/docs.
- Local — trusted Linux/macOS/Windows execution, setup, observability, history, and daily use
- Sprite — remote Linux, GitHub permissions, connection, and operations
- Architecture — how the two execution modes fit together
- MCP tools — exact tool contracts and session behavior
