OpenAI Plugins submission metadata and safety annotations for all 16 MCP tools, plus the OpenAI Apps domain-verification challenge endpoint. The attached demo uses only a sanitized example.com production scan and a neutral tool inventory; it contains no account identity, personal chat list, private site list, or customer data. Automated results are not certification or a compliance guarantee.