#web_search

web_search = "disabled" | "cached" | "indexed" | "live": what each Codex search mode allows

Codex defaults to cached search locally and live with full access. web_search = "indexed" cuts prompt injection risk, "disabled" turns it off, and --search enables it for one run.