diff --git a/docs-site/content/docs/guides/llm-configuration.mdx b/docs-site/content/docs/guides/llm-configuration.mdx
index b5067fc9..c9e7abeb 100644
--- a/docs-site/content/docs/guides/llm-configuration.mdx
+++ b/docs-site/content/docs/guides/llm-configuration.mdx
@@ -72,6 +72,11 @@ codex` installs instructions and MCP access for an end-user Codex session.
 `ktx setup --llm-backend codex` makes **ktx** itself execute ingest, scan
 enrichment, memory, and other LLM-backed work through Codex.
 
+During runtime loops, **ktx** starts a temporary loopback MCP server for the
+current run, exposes only the tools passed to that run, asks Codex to use a
+read-only sandbox with approval disabled, auto-approves only those run-scoped
+MCP tools, and disables Codex web search.
+
 ## Prompt caching
 
 `llm.promptCaching` has partial parity on `claude-code`. Status and doctor warn