Skip to content

feat(mcp): ChatGPT Apps phase 1 — tool annotations + outputSchema + remote OAuth discovery#4

Open
enot3615 wants to merge 1 commit into
mainfrom
feat/chatgpt-mcp-phase1
Open

feat(mcp): ChatGPT Apps phase 1 — tool annotations + outputSchema + remote OAuth discovery#4
enot3615 wants to merge 1 commit into
mainfrom
feat/chatgpt-mcp-phase1

Conversation

@enot3615

Copy link
Copy Markdown
Collaborator

Auto-opened. See commit body for details. Verified (tsc clean / round-trip smoke). Behavior unchanged unless feature flags set.

…emote OAuth discovery

- mcp: required OpenAI Apps SDK annotations (readOnly/openWorld/destructiveHint)
  + outputSchema on all 7 tools; structuredContent on agent_address /
  pay_with_split / quote_split.
- mcp-http: RFC 9728 /.well-known/oauth-protected-resource + provider-agnostic
  JWT validation (jose + JWKS, iss/aud/exp/scope) behind AIFINPAY_AUTH_REQUIRED
  (off by default); 401 + WWW-Authenticate triggers ChatGPT account-linking.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant