Atbash Safety checks supported Codex tool calls against your Atbash agent's safety policy before execution. The package includes a local PreToolUse hook, the bundled production Atbash SDK, and a setup and troubleshooting skill; it does not use an MCP server. Requires a supported local Codex environment, Node.js 22.13 or newer, an Atbash account with a registered agent, and network access to Atbash services. Configure your agent private key and exact organization name in the local Atbash configuration file, then explicitly review and trust the hook in Codex. Never paste private keys into chat. Once configured, enabled, and trusted, the hook sends tool-call details through the SDK to Atbash for a judgment. ALLOW permits the pending call; HOLD, BLOCK, and handled configuration or service errors deny that attempt. Coverage is limited to tool calls exposed to Codex's PreToolUse lifecycle; ordinary Chat, plain-text replies, and tools outside that lifecycle are not protected. Source and setup instructions: https://github.com/Atbash-Ai/atbash-chatgpt-plugin