ChatGPT custom apps: what you agree to
What you agree to when you add a custom MCP server to ChatGPT: what the server can see, when ChatGPT checks with you, and how to cut it off.
Choose what gets shared 2 min read
Review permissions before connecting an AI tool
Check which account is requesting access, what data and actions the connection permits, and how to revoke it. Approve the request only when it matches the setup you started and the task you intend to perform.
ON THIS PAGE
Read the request as a grant of authority
A familiar product name is not enough. Confirm that you initiated the request and that the account is the one you want to connect. If a review screen shows capabilities, read them before approving.
Distinguish read access from the ability to change data or perform actions. Also distinguish the source you intend to share from the larger account scope a connection may request. Ask for clarification when the difference is unclear.
Plan the way out before connecting
Find the device or connection controls before you need them. For a temporary test, know which grant you will revoke afterward. Closing a tab or ending a chat does not necessarily revoke an authorization.
Use a harmless test source after setup. Do not paste provider passwords or secret tokens into an ordinary conversation to make a connection work. Follow the current client-specific setup instructions and stop if a request does not match them.
TAKE THIS WITH YOU
Connection approval checklist
An illustrative template. Replace the details with material you are allowed to share.
I started this request: yes / no Account shown is correct: yes / no Requested data scope matches my intent: yes / no Read and write capabilities understood: yes / no Provider-specific warnings read: yes / no Revocation control located: yes / no Harmless connection test prepared: yes / no
USING THIS WITH DRAY
Keep the context. Check the source.
Dray’s Chrome setup asks you to sign in, review the browser request, and approve it. ChatGPT shows OpenAI’s risk warning for custom apps; read it before you tick the box. When an assistant connects, Dray’s approval page lists what it may do. By default it can read your memories and also add, change, or mark them out of date.
Available sources and connections depend on your setup. Read the privacy policy before granting access.
Sources & next reads
Product details are grounded in the guides below. Example projects and prompts are illustrative, not customer results.