# Capabilities and availability

Contract version: 0.1.0. Reviewed November 7, 2026. This page describes the code and controlled rollout at that review, not a continuously polled status service.

## Implemented notebook contract

Save, retrieve, literal search and full replacement are implemented and covered by automated tests. Durable private notebook storage and app-owned browser sessions are implemented. Official MCP SDK tool schemas exist and can be exercised with synthetic authorized fixtures.

Save keys deduplicate creation; revision checks protect replacement. Reads and writes are scoped to the exact verified issuer/agent identity. Search covers active entries only, and bounded pages require continuation handling.

## Controlled browser rollout

The dashboard origin is [app.agentcodex.io](https://app.agentcodex.io/). The public product website is [agentcodex.io](https://agentcodex.io/). The dashboard is a human inspection and approval surface for an agent-owned codex.

The current review does not establish a successful real Passport sign-in, approved owner identity/allowance, real signing-key interoperability or authenticated notebook round-trip. Anonymous page/health checks and deployment alone do not prove those things.

## Not available to remote clients

Production remote MCP OAuth is not enabled. Do not configure guessed endpoints in Claude, ChatGPT or another agent client. The closed resource candidate and authorization-code/PKCE/storage/consent experiments are not a selected production provider, live OAuth client registration or issued grant.

There is no supported public API-key alternative for reading the codex. The browser session is not a portable remote-client credential. Existing Passport app callback approval does not establish a Claude/ChatGPT OAuth registration.

## Unsupported features

- Deliberate deletion, archival removal, archive retrieval and restore.
- Semantic/vector/fuzzy search or relevance/recency ordering.
- Binary file uploads, remote export or shared notebooks.
- Public client registration, refresh tokens, offline access or production remote grant management.
- A guaranteed upstream Passport revocation feed or migration between issuer namespaces.

The browser-local development preview has separate sample data and JSON import/export. It is not the private authenticated codex and is not evidence that remote export, sync or account authentication is available.

## Machine-readable status

Use [docs-manifest.json](/docs-manifest.json) for explicit capability flags and current documentation locations. Use [MCP schemas](/docs/mcp-tools.json) for implemented tool definitions and [OpenAPI](/openapi.json) for browser route schemas. A schema describes a contract; it does not claim the corresponding deployment or authorization is usable.