Skip to content

docs: add the OpenAI Plugins Directory submission guide - #115

Draft
aterga wants to merge 1 commit into
mainfrom
claude/openai-directory-guide-p4el4n
Draft

docs: add the OpenAI Plugins Directory submission guide#115
aterga wants to merge 1 commit into
mainfrom
claude/openai-directory-guide-p4el4n

Conversation

@aterga

@aterga aterga commented Aug 1, 2026

Copy link
Copy Markdown
Collaborator

Summary

Adds docs/openai-directory-submission.md — the submission guide for listing the connector in OpenAI's directory (now the universal Plugins Directory shared by ChatGPT and Codex, built on the Apps SDK and MCP), verified against developers.openai.com on 2026-08-01. Companion to the Anthropic guide from #109.

Key contents:

  • Process: submission happens at platform.openai.com/plugins; requires a verified organization and the Apps Management write permission; seven-tab form (Info, MCP, Skills, Prompts, Testing, Global, Submit); no published review SLA; updates re-enter review after a server re-scan.
  • Readiness table: the live server already meets OpenAI's published auth bar — OAuth 2.1 auth-code + PKCE S256 per the MCP authorization spec, DCR (registration_endpoint), RFC 8414/9728 discovery documents, and ChatGPT's callback (chatgpt.com/connector/oauth/{callback_id}) is already covered by the redirect allow-list prefix in src/auth.rs. Tool annotations (readOnlyHint/destructiveHint/openWorldHint) are explicitly required — "incorrect or missing action labels are a common cause of rejection" — and already test-enforced on all 26 tools.
  • Open items: the /.well-known/openai-apps-challenge domain-verification route (small code change; the token is revealed during submission, so build it when the submission starts); the "login and password for a fully featured demo account" wording vs passkey-based Internet Identity (self-serve position plus fallback identity, with higher push-back risk than at Anthropic); the crypto/commerce policy analysis (OpenAI prohibits crypto offerings involving speculation or deception — narrower than Anthropic's blanket financial-transfers rule); and a drafted test-case set (6 positive, 4 negative — the portal requires ≥5/≥3, verified on web and mobile).

Related issues

Companion to #109 (Anthropic submission package). No code changes; the domain-verification route will be its own PR when a submission is started.

Changes

  • Add docs/openai-directory-submission.md.

Testing

  • cargo build --locked --all-targets — n/a, docs-only
  • cargo test --locked --all-targets — n/a, docs-only
  • cargo fmt --all / cargo clippy --all-targets — n/a, docs-only
  • npm test --prefix monitoring/mcp-status — n/a, docs-only

Facts verified against the official OpenAI pages (app-submission-guidelines, plugins/deploy/submission, plugins/build/auth) on 2026-08-01.

Checklist

  • I have read the Contributing guidelines.
  • Docs (README / comments) updated for any user-visible change.
  • No secrets, credentials, or internal-only information are included.

Generated by Claude Code

The submission path for ChatGPT's directory (now the universal Plugins
Directory shared by ChatGPT and Codex, built on the Apps SDK): portal at
platform.openai.com/plugins, verified-organization prerequisite, the
seven-tab form, and review flow. Readiness table against the live
server: OAuth 2.1 + PKCE S256, DCR, and the discovery documents already
meet OpenAI's published auth requirements, and ChatGPT's callback
prefix is already in the redirect allow-list. Open items: the
/.well-known/openai-apps-challenge domain-verification route (small
code change, token comes from the portal), the login-and-password
demo-account wording vs passkey-based Internet Identity, the crypto/
commerce policy analysis (narrower than Anthropic's prohibition), and
a drafted 6-positive/4-negative test-case set.

Verified against developers.openai.com on 2026-08-01.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TGhwpdTbUqQbR5AiiN8Ljw
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants