Supportal — API Access

Your Supportal Access Token

This single Bearer token authenticates every /api/* endpoint — devices, wiki, files. The same token is used by both the relay bridge (device control) and the wiki bridge (canonical wiki I/O).

Loading…

Manage token (rotate, scope) →

Install via plugin marketplace (recommended)

One-shot install — adds the marketplace, installs codex-mcp-server, and you're done:

/plugin marketplace add newhaptics/claude-skills
/plugin install codex-mcp-server

Configure your token (recommended: turn-key setup script)

One-click install — script writes your token to ~/.claude/channels/codex-mcp/token with restricted permissions. No shell-rc edits needed; the plugin reads the file as a fallback when the env var isn't set.

Then run it:

bash ~/Downloads/codex-mcp-setup.sh        # Linux / macOS
# or
powershell -ExecutionPolicy Bypass -File "$env:USERPROFILE\Downloads\codex-mcp-setup.ps1"   # Windows

After running: restart Claude Code (or /reload-plugins). Run /mcp — codex should appear connected. Verify with mcp__codex__wiki_search "test".

Sandbox app development

The codex-dev plugin gives you a safe, sandboxed loop to build and run your own apps on your assigned Codex — deploy_dev_app → reload_dev_apps → read_dev_log. Apps run as a non-root developer user (no root, no shell, no TPM), scoped to the device(s) assigned to you.

Full walkthrough: Help → Building Codex Apps.

Install via plugin marketplace

One-shot install:

/plugin marketplace add newhaptics/claude-skills
/plugin install codex-dev

Configure your token + device

Run the setup script — it configures codex-dev with your token and assigned device serial baked in directly. No shell-rc edits, no export, no restart dance:

bash ~/Downloads/codex-dev-setup.sh        # Linux / macOS
# or
powershell -ExecutionPolicy Bypass -File "$env:USERPROFILE\Downloads\codex-dev-setup.ps1"   # Windows

After running: start Claude Code (or open a new session if one's already running) — run /mcp, codex-dev should appear connected already. Your token can't do root device control or use legion-chat — that's enforced server-side. No device assigned yet? The script will tell you to ask an admin first.