You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Added
OpenAI Apps domain verification for hosted MCP. HTTP mode now serves the raw OPENAI_APPS_CHALLENGE_TOKEN from /.well-known/openai-apps-challenge, allowing
ChatGPT Apps domain verification against Cloud Run and other HTTPS-hosted MCP origins without
committing the token.
Cloud Run verification playbook.deploy/cloud-run documents the Challenge Base URL shape,
token environment variable, and curl check for ChatGPT Apps verification, and the wrapper now
tracks the semiotic@^3.7.3 release line.
Tests
Added MCP HTTP regression coverage for the OpenAI Apps challenge route while confirming the
unauthenticated OAuth protected-resource probe continues to return 404.