Codex app-server is the interface Codex uses to power rich clients (for example, the Codex VS Code extension). Use it when you want a deep integration inside your own product.

It mentions 'Inside your own product', but not sure if that means also your own commercial application.

I think it's permissible. Zed uses it to power their Codex integration. OpenAI has been quite vocal about it.