Codex CLI burned platform credits to a negative balance after ChatGPT Plus authentication
Shaurya Sethi (OpenAI Codex CLI user) · Aug 7, 2025 · Coding agent
What happened
A Codex CLI user authenticated with a ChatGPT Plus account, performed tasks, and watched API credits get consumed despite never providing an OpenAI API key. The user reported going into a negative balance, with the CLI surfacing an 'Insufficient quota' error pointing at platform billing. The issue was closed as completed after the team addressed the billing-path behavior.
Causal vector
CLI consumed API credits during ChatGPT Plus auth with no API key provided; user reported going into negative balance
Source
Reported by GitHub issue, openai/codex #1954. Verified against the primary report.
A spend firewall that gates every outbound API call — not just the key the user thought they were using — would have blocked the silent credit drain before it crossed zero.
The six rule types that contain this class of failure
Per-transaction cap
Any single spend above your ceiling is BLOCKED before it moves.
Daily total
Cumulative spend across all agent calls, bounded per day.
Velocity limit
Stops runaway retry loops — the #1 cause of overnight losses.
Merchant allowlist
Only approved destinations can ever receive funds.
Category rules
Flag high-risk classes (crypto, infra, refunds) for review.
Approval threshold
Above a value, the action waits for a human.
Related incidents
Codex Windows app exhausted a weekly usage limit in about 62 hours across many parallel tasks
lty418905-blip (OpenAI Codex user) · Aug 5, 2026
Codex context auto-compaction loop rereads files, loses progress, and burns paid credits
edisonjoao1 (OpenAI Codex user) · Jul 24, 2026
OpenAI confirmed Codex background tasks were silently burning users' usage limits faster than normal
OpenAI (Codex) · Jun 30, 2026
Don't be the next entry
Every incident in this database is the result of trusting a prompt, a provider cap, or a human review cycle. sipi.bot replaces all three with one deterministic call. 80 documented failures, one control.