Codex Cloud brings Tailscale access to private services
Codex Cloud can reach private services through Tailscale. In an October 6 post, Tailscale said OpenAI built the integration using its existing product, without a partnership agreement or custom API. Tailscale announcement.
Why private network access matters
OpenAI’s current cloud environment documentation describes access to internal APIs, package registries and other HTTP or HTTPS services through a VPN. This gives a cloud coding task a route to resources that its workflow needs on a private network. OpenAI cloud documentation.
Access still depends on two sets of rules. Both the Tailscale network policy and the cloud environment’s internet access settings must allow the destination. A network connection alone does not grant permission inside the service.
Check the current DNS guidance
Tailscale’s October 6 post says MagicDNS and split DNS are unsupported. The OpenAI documentation checked on October 8 says both are supported, alongside private IPv4 subnet routes. It specifies fully qualified hostnames that resolve to IPv4.
That difference matters when planning access to an internal service. The current official documentation is the stronger guide to supported configuration, while the launch post records an earlier description. ByteForward has not independently tested the connection.
Keep the agent’s access limited
Tailscale recommends assigning agents dedicated tags and narrowly scoped grants, rather than letting them inherit broad network access. It also recommends retaining key expiry and using network flow logs where available.
OpenAI says tasks in a shared environment use its configured VPN identity. Teams should account for that shared identity when deciding which services an environment may reach.
Who can use it
OpenAI lists Codex Cloud for eligible Plus, Pro, Business, Enterprise, Healthcare and Education accounts, subject to rollout and workspace settings. Free and Go are excluded. Availability of Codex itself does not mean an account has Codex Cloud. Current plan availability.
Codex Cloud VPN settings shown in the Tailscale announcement. Source Tailscale.
For setup context, read our guide to Codex Cloud reusable environments.
