Skip to content

fix(chatgpt): use the ChatGPT MCP endpoint - #8

Merged
ethanoroshiba merged 1 commit into
mainfrom
toshi/verify-mcp-server-url
Oct 16, 2026
Merged

ethanoroshiba merged 1 commit into
mainfrom
toshi/verify-mcp-server-url

Conversation

@ethanoroshiba

Copy link
Copy Markdown
Contributor

Description

The ChatGPT distribution currently copies src/plugins/portable/mcp.json, so its generated MCP server URL is https://agents.coinbase.com/mcp instead of the ChatGPT channel endpoint, https://agents.coinbase.com/mcp/chatgpt. Its validator and an existing test also enforced that incorrect shared configuration.

  • Add src/plugins/chatgpt/mcp.json and copy each distribution's MCP configuration alongside its manifest.
  • Require the exact ChatGPT URL during ChatGPT validation; preserve /mcp for portable, Claude Code, and Codex.
  • Validate the new source configuration in both CI workflows and document the endpoint distinction.
  • Replace the shared-MCP assertion with endpoint regression coverage, including generated packages and both ChatGPT archive formats. Keep the canonical skill library and icon artwork unchanged.

Generated with Toshi

Change type

  • Harness integration or metadata
  • Skill workflow
  • Bug fix
  • Documentation
  • Breaking change (describe migration)

Validation

Reproduced the bug on current main: the ChatGPT build emitted /mcp, and all 10 existing tests passed. Added regression tests failed before the builder/validator fix and passed afterward.

Passed locally:

  • python3 -m unittest discover -s tests -v — 12 tests.
  • uvx ruff@0.13.2 check scripts/build-distributions.py tests
  • uvx ruff@0.13.2 format --check scripts/build-distributions.py tests
  • check-jsonschema==0.34.1 validation against the vendored plugin and MCP schemas for both portable and ChatGPT source manifests/configurations and generated packages.
  • python3 scripts/build-distributions.py dist
  • shasum -a 256 --check SHA256SUMS — all eight archives passed.
  • Compared the six portable, Claude, and Codex archives against a build using main's builder: byte-identical.
  • git diff --check

Not run: native ChatGPT import, interactive OAuth, authenticated portfolio read, or financial operations. Static packaging validation does not establish directory approval or runtime client support.

  • Generated portable manifest and MCP config validate against the vendored Agent Plugins schemas
  • Package paths and skill references remain inside each generated plugin root
  • Marketplace, skills, MCP, and icon paths are valid
  • Exactly one canonical skill library; generated copies are not committed
  • Claude compatibility metadata/endpoint and marketplace sources agree with the portable package
  • Tool schemas, authorization, and retry behavior reviewed
  • README and changelog updated; versions consistent
  • No unapproved disclosures or sensitive data
  • Signed commits

Tool schemas, authorization, and retry behavior are unchanged; authenticated runtime verification was not performed.

Release considerations

After merge, the existing Pages workflow will regenerate the unreleased 0.0.1 ChatGPT package with /mcp/chatgpt. Existing downloaded packages must be replaced with the regenerated package. Portable, Claude Code, and Codex remain on /mcp. Existing directory policy, OAuth client-support, and publisher approval requirements still apply; this endpoint correction does not authorize publication or establish policy compliance.

@cb-heimdall

cb-heimdall commented Oct 16, 2026 •

Copy link
Copy Markdown

✅ Heimdall Review Status

Requirement Status More Info
Reviews ✅ 1/1
Denominator calculation
Show calculation
1 if user is bot 0
1 if user is external 0
2 if repo is sensitive 0
From .codeflow.yml 1
Additional review requirements
Show calculation
Max 0
0
From CODEOWNERS 0
Global minimum 0
Max 1
1
1 if commit is unverified 0
Sum 1

@ethanoroshiba
ethanoroshiba merged commit 94a9a54 into main Oct 16, 2026
6 checks passed
@ethanoroshiba
ethanoroshiba deleted the toshi/verify-mcp-server-url branch October 16, 2026 20:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants