The adapter binds to 127.0.0.1 by default. Do not expose it to a LAN or the
public internet: it accepts model requests without its own authentication.
Fable-only mode does not need an OpenAI token. Claude authentication remains inside the installed Claude Code CLI; this repository does not read or store Claude credentials.
Combined-picker mode is more sensitive. Codex sends its normal ChatGPT Codex
authorization headers to the loopback adapter, which forwards them in memory
to the normal Codex backend for non-Fable models. The adapter does not log or
persist those headers. Combined mode is disabled unless
CODEX_FABLE_ENABLE_OPENAI_PASSTHROUGH=1 is set.
Generated catalog files are ignored because they are derived from the local Codex installation and can contain full model instruction templates.
Report vulnerabilities privately through GitHub's security-advisory feature.