DevSpace lets ChatGPT read and edit the code on your own laptop. That part genuinely works and matters. But "doubles your rate limits" is spin, not spec. Here's the plain-English audit — what's true, what's hype, and the real setup — before you connect it to your machine.
DevSpace is a self-hosted MCP server (by a dev called Waishnav). It exposes a few tools — read file, edit file, run shell, search — and you point a tunnel (Cloudflare, ngrok) at it. ChatGPT connects through a URL you control, secured by an owner password only you have.
Your code never uploads — ChatGPT reads it through MCP, files stay on disk. You can plan in chat and hand off to Codex / Cursor / Claude Code to build. And ChatGPT becomes a fresh code reviewer: show it your diff, it critiques and suggests fixes.
ChatGPT chat and Codex are two separate meters — that part's true. But you're not getting twice the Codex quota. You're moving work to a different product with its own ChatGPT-chat allowance. A real backstop when one bucket runs dry — not quota pooling.
Developer Mode needs ChatGPT Plus, Pro, Business, Enterprise, or Edu. Free and Go can't use this at all. In India that's ₹1,999/mo for Plus — and running it alongside Codex CLI is still one subscription, not two pooled.
So yes — ChatGPT chat and Codex are two different meters. The reel got that right. What it got wrong is "double." You're not stacking quotas; you're draining one of two separate meters on the same Plus plan. A similar tool's README says it plainly: it "does not bypass, increase, pool, or modify" any model limits.
"It's open source on GitHub." Confirmed — Waishnav/devspace, public repo.
"ChatGPT and Codex have separate meters." Yes. Codex CLI, IDE, web, and app share one 5-hour bucket; ChatGPT chat is a different meter.
"Plan in ChatGPT, build in Codex or Cursor." A real workflow win — especially when one bucket runs dry mid-project.
"Doubles your rate limits." No. You're switching to a different product with a different meter, not stacking quotas. Similar tools explicitly deny this.
"Setup is stupid easy, three commands." The three CLI commands are real, but the full path needs Plus tier, Node 22, a tunnel, Developer Mode, custom-app config, and password approval.
"OpenAI has a button to kill it." Honest. Developer Mode is a beta feature — OpenAI can restrict or remove it without notice.
"Don't be greedy with it." The fact the creator says this is itself a tell — the workflow lives near the edge of OpenAI's app-developer terms. Stay clearly inside reasonable use.
Developer Mode requires Plus, Pro, Business, Enterprise, or Edu. Free and Go can't use it. In India, Plus is ₹1,999/mo.
DevSpace needs Node 20.12+ and under 27. Use nvm, fnm, or mise to switch cleanly.
Run npx @waishnav/devspace init, answer the prompts, copy the owner password it prints — keep it private.
DevSpace does not make one for you. Use Cloudflare Tunnel, ngrok, Pinggy, or Tailscale Funnel — point it at port 7676.
config set publicBaseUrl https://your-tunnel-url, then run serve.
Settings → Apps → Advanced → Developer Mode. Keep "Enforce CSP" on. Create a custom app pointing at your tunnel's /mcp URL.
On first connect, DevSpace shows an approval page. Enter the password from step 3, then ask ChatGPT to open an approved folder.
# the real install, line by line # 1. install DevSpace and run interactive setup npx @waishnav/devspace init # 2. start your tunnel (Cloudflare example) cloudflared tunnel --url http://localhost:7676 # 3. tell DevSpace your tunnel URL, then serve npx @waishnav/devspace config set publicBaseUrl https://your-tunnel.example.com npx @waishnav/devspace serve # 4. ChatGPT: Settings -> Apps -> Advanced -> Developer Mode # 5. Create app -> paste https://your-tunnel.example.com/mcp # 6. Approve with the owner password DevSpace printed
OpenAI warns that connecting to untrusted MCP servers raises exposure to prompt injection. A malicious file in your repo could quietly tell ChatGPT to delete a folder or leak a key. Password + CSP help, but the risk is real.
A weak password, a leaked URL, or an expired ngrok domain someone else grabs all expose your machine. Rotate the owner password, use a named tunnel (not a temporary one), and never share screenshots with the URL visible.
Custom MCP apps fall under OpenAI's App Developer Terms. Personal use is fine; framing it as "doubling limits to bypass usage controls" is not. Stay clearly inside reasonable use.
Free and Go tiers don't get Developer Mode at all. Plus at ₹1,999/mo is the minimum — and running it alongside Codex CLI is still one subscription, not two pooled.
The complete developer playbook — the plumbing, the rate-limit truth, every reel claim graded, the security reality check, the weekend test plan, and full sources. Read inline or download.