ChatGPTSAFE
MCP server enabling interaction between macOS ChatGPT desktop app and MCP-compatible AI assistants.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A Model Context Protocol (MCP) server that enables AI assistants to interact with the ChatGPT desktop app on macOS.
https://github.com/user-attachments/assets/a30c9b34-cdbe-4c0e-a0b0-33eb5054db5c
Language Support
Supported system languages for response detection:
- Korean
- English
If your macOS system language is not listed above, please follow these instructions:
- Make sure ChatGPT desktop app is running
- Run
show_all_button_names.applescriptand copy the output to create an issue for language support.
Features
- Send prompts to ChatGPT from any MCP-compatible AI assistant
- Built with Python and FastMCP
Note: This server only supports English text input. Non-English characters may not work properly.
Installation
Prerequisites
- macOS
- ChatGPT desktop app installed and running
- Python 3.10+
- uv package manager
For Claude Code Users
Simply run:
claude mcp add chatgpt-mcp uvx chatgpt-mcp
That's it! You can start using ChatGPT commands in Claude Code.
For Other MCP Clients
Step 1: Install the MCP Server
Option A: Install from PyPI (Recommended)
# Install with uv uv add chatgpt-mcp
Option B: Manual Installation
# Clone the repository git clone https://github.com/xncbf/chatgpt-mcp cd chatgpt-mcp # Install dependencies with uv uv sync
Step 2: Configure Your MCP Client
If installed from PyPI, add to your MCP client configuration:
{
"mcpServers": {
"chatgpt": {
"command": "uvx",
"args": ["chatgpt-mcp"]
}
}
}If manually installed, add to your MCP client configuration:
{
"mcpServers": {
"chatgpt": {
"command": "uv",
"args": ["run", "chatgpt-mcp"],
"cwd": "/path/to/chatgpt-mcp"
}
e6ddd34e72aaOBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add chatgpt-mcp -- uvx chatgpt-mcp
{
"mcpServers": {
"chatgpt-mcp": {
"command": "uvx",
"args": [
"chatgpt-mcp"
]
}
}
}Exposed tools (3)
1 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
ask_chatgpt_tool | write | Send a prompt to ChatGPT and return the response. |
get_chatgpt_response_tool | read | Get the latest response from ChatGPT after sending a message. |
new_chatgpt_chat_tool | write | Start a new chat conversation in ChatGPT. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
e6ddd34e72aafull audit observations/trust-audit/mcp-server/xncbf__chatgpt-2.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | e6ddd34e72aa | SAFE | B | 89 | first audit |
Questions
What is the ChatGPT MCP server?
MCP server enabling interaction between macOS ChatGPT desktop app and MCP-compatible AI assistants.
What tools does ChatGPT expose?
3 in total: 1 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is ChatGPT safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does ChatGPT need?
No credential environment variables were found in its source, so it appears to need none.
How does ChatGPT run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as chatgpt-mcp.
How current is this page?
The grade is for one exact copy of the source (e6ddd34e72aa), read on 2026-10-07. The repository is watched and re-audited when it changes.