| title | Third-party cloud agent authentication | ||
|---|---|---|---|
| description | Connect your Anthropic or OpenAI credentials to Oz, then launch Claude Code or Codex as cloud agents from the desktop app, Oz web app, or API. | ||
| sidebar |
|
Third-party cloud agents — Claude Code and Codex — call their provider directly, so you need to store credentials as Warp-managed secrets before launching a run. This page walks through the one-time setup for each.
Auth secrets can be scoped to a team (available to all teammates' runs) or personal (only your own runs), just like any other Warp-managed secret.
:::note Bring Your Own Key (BYOK) configured in the Warp desktop app applies to local agent runs only. Cloud runs of Claude Code and Codex always use Warp-managed secrets. :::
Claude Code is Anthropic's agentic coding tool. For more on Claude Code authentication, see Anthropic's Claude Code auth docs.
- Go to the Anthropic Console and sign in (or create an account).
- Navigate to API keys and create a new key.
- Make sure your account has API credits — Claude Code runs are billed against your Anthropic API balance.
Oz also supports Bedrock-routed credentials (Anthropic Bedrock API key and Anthropic Bedrock access key) if your team consumes Anthropic models through AWS.
In Cloud Mode, click the key icon above the input and add your Anthropic credential.
Start a new run, choose Claude Code as the harness, and add a new key in the harness auth secrets dropdown.
oz secret create claude api-key --team <KEY_NAME>Add --description "..." to record rotation notes or owner info. Replace --team with --personal to make the secret available only to your own runs.
Expected outcome. oz secret list shows the new secret with the matching Anthropic credential type. The value is never displayed.
Codex is OpenAI's coding agent. For more on Codex authentication, see OpenAI's Codex auth docs.
:::caution A ChatGPT subscription (Plus, Pro, Team) does not include API access. You need a separate OpenAI API key with API credits. :::
- Go to the OpenAI Platform and sign in (or create an account).
- Navigate to API keys and click Create new secret key.
- Make sure your account has API credits — Codex runs are billed against your OpenAI API balance, not a ChatGPT subscription.
In Cloud Mode, click the key icon above the input and add your OpenAI credential.
Start a new run, choose Codex as the harness, and add a new key in the harness auth secrets dropdown.
oz secret create codex api-key --team <KEY_NAME>Add --description "..." to record rotation notes or owner info. Replace --team with --personal to make the secret available only to your own runs.
Expected outcome. oz secret list shows the new secret with the matching OpenAI credential type. The value is never displayed.
Auth secrets follow the same management commands as any other Warp-managed secret. See Cloud agent secrets for the full reference. Common tasks:
# List secrets you can see
oz secret list
# Rotate a secret value (prompts for the new value)
oz secret update --team --value ANTHROPIC_API_KEY
# Update the description
oz secret update --team --description "Rotated 2026-05-12; owned by platform team" ANTHROPIC_API_KEY
# Delete a secret (irreversible)
oz secret delete --team ANTHROPIC_API_KEY:::caution Deleting an auth secret breaks any scheduled or integration-triggered run that references it by name. Update the schedules and integrations to point at a new secret first. :::
Claude Code or Codex run fails with an authentication error.
Confirm the run was started with a harness auth secret selected. From the Oz web app's run detail pane, the Harness auth secret field shows which secret (if any) was used. Re-launch the run with the correct secret selected, or create one if your team doesn't have one yet.
The harness auth secret dropdown is empty.
The dropdown only lists secrets whose type matches the selected harness — Anthropic types for Claude Code, OpenAI for Codex. If you stored the credential as a raw value, recreate it using the typed flow above.
The selected harness is disabled.
Your team admin has disabled the harness for your workspace. Contact your admin or pick a different harness for the run.
- Harnesses in Oz — overview of third-party harnesses in Oz.
- Claude Code in Warp — run Claude Code locally in the Warp terminal.
- Codex CLI in Warp — run Codex locally in the Warp terminal.
- Cloud agent secrets — the full Warp-managed secrets reference.