OpenAI Codex vs OpenHands

OpenAI Codex

Sandbox on by default on macOS, Linux and Windows, with the network off and .git and .codex read-only. Pre-1.0 at 0.160.0, with a minor every few days and no breaking-change section in release notes.

OpenHands

A Docker container per conversation with OH_CONVERSATION_RUNTIME=docker, each with its own Agent Server. Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem.

OpenAI Codex

1. Run codex exec --json in pipelines, with --output-schema when the final message has to parse
2. Keep the default sandbox. --yolo removes both the sandbox and approvals
3. Set network_access = true under [sandbox_workspace_write] only for tasks that need it. Network is off by default
4. Set [analytics] enabled = false and [feedback] enabled = false in config.toml to keep usage data local
5. Pin the npm version. A 0.x minor lands every few days

OpenHands

1. Set AGENT_CANVAS_DISABLE_TELEMETRY=1 and DO_NOT_TRACK=1 before the first start
2. Start Canvas with OH_CONVERSATION_RUNTIME=docker or use the Docker image. The npm install runs the agent on the host
3. Turn on confirmation mode with a risk threshold. Canvas starts with it off
4. Use the SDK or the Agent Server API for headless runs. The openhands --headless CLI is no longer maintained
5. Set filter_tools_regex on the agent to keep unneeded MCP tool definitions out of the context