Codex ships more branches.
Each one needs somewhere to run.
When an agent authors ten times more branches, ten times more infrastructure surrounds them: an environment per pull request, a database per environment, secrets, DNS, teardown. Install eight Qovery skills with one command and Codex can create and destroy all of it on your own cloud account, inside a boundary it does not get to negotiate.
Eight skills, one install.
The Qovery skills follow the Agent Skills open standard, so OpenAI Codex picks the right one from what you ask. Each also has a slash command if you would rather be explicit.
qovery
/qoveryEntry point. Routes to the right skill and handles quick operations: list, status, stop, restart, logs, clone, scale, custom domains, deployment history.
qovery-onboard
/qovery-onboardGuided setup. Recommends cloud provider, cluster type, environment structure, RBAC and cost defaults. Handles bring-your-own-Kubernetes and migrations from Heroku, Vercel, Netlify, Render and Railway.
qovery-deploy
/qovery-deployDeploys any application to Kubernetes. Analyses the codebase, writes a Dockerfile if one is missing, provisions databases, sets environment variables, then deploys via CLI and API or Terraform.
qovery-troubleshoot
/qovery-troubleshootEight-layer diagnosis across deployment status, build and runtime logs, health checks, env vars, networking, resources and cluster. Matches 20+ error patterns and writes a runbook to .qovery/runbooks/.
qovery-optimize
/qovery-optimizeAnalyses historical CPU and memory against allocation across seven optimisation dimensions, estimates external cloud costs, and produces a markdown report plus CSV export.
qovery-speedup
/qovery-speedupMeasures the deployment pipeline stage by stage, classifies each bottleneck as yours or Qovery infrastructure, and proposes Dockerfile and health-check fixes with before and after timings.
qovery-preview
/qovery-previewCreates a preview environment from a pull request. Detects or builds a blueprint environment, clones it, switches branches, and configures auto-shutdown so it does not run all weekend.
qovery-terraform
/qovery-terraformReads an existing Qovery setup from the API and generates HCL for the qovery/qovery provider, imports resources into state, and validates against a test clone before you commit.
Two interfaces. Pick both.
The skills deploy. The MCP Server operates what is already running. They are complementary, and most teams end up using both.
Agent Skills
OpenAI Codex is listed as Supported in the Qovery skills compatibility table. The installer places all eight skills where compatible tools discover them, alongside their slash commands.
Then just ask: "Deploy my application with Qovery".# Install all eight skills, globally $ curl -fsSL https://skill.qovery.com/install.sh | bash # Or scope them to the current project only $ curl -fsSL https://skill.qovery.com/install.sh | bash -s -- --project
MCP Server
The skills deploy. The MCP Server operates what is already running. It is a standard remote MCP endpoint, so configure it the way you configure any MCP server in Codex.
Also published in the MCP registry as com.qovery. Write mode additionally requires write access enabled in the Qovery Console.# Server URL, read-only by default https://mcp.qovery.com/mcp # Read/write, when you explicitly want it https://mcp.qovery.com/mcp?read_write=true # Or authenticate with a Qovery API token https://mcp.qovery.com/mcp?token=YOUR_QOVERY_TOKEN
The boundary is not in the prompt.
It is in the API underneath.
Instructions in a file are a request. OpenAI Codex can read them, and it can also decide not to follow them. These four properties hold regardless of what the model decides, because none of them are things the model is asked to respect.
Every one of them is checkable in the docs before you trust a word of this page.
Read-only by default
The Qovery MCP Server connects in read-only mode unless you say otherwise. Your agent can list environments, read service state, and tail logs. It cannot change anything.
Write access is two deliberate switches
Writes require read_write=true on the connection URL and a separate write-access setting enabled in the Qovery Console. Neither one is something a model can talk its way into.
Scoped by the RBAC you already run
An agent authenticates with its own API token and inherits the permissions of the role that token was issued under. Agents do not get a parallel access model, and they do not consume user seats.
Every action lands in the audit log
MCP tool calls and API operations are recorded in the Qovery Console audit trail against the token that made them, which is what turns "an agent did something" into an answerable question.
OpenAI Codex and Qovery.
Does Qovery work with OpenAI Codex?
How do I connect OpenAI Codex to Qovery?
Can Codex create and tear down preview environments?
How many agents can I run against Qovery?
Get started
One command, and OpenAI Codex
deploys to your own cloud.
Install the skills, point them at your AWS, GCP, Azure or Scaleway account, and let the agent work inside a boundary you set once. Read-only until you decide otherwise.