SpyBara
Go Premium

enterprise/apps-and-connectors.md 2026-07-16 20:57 UTC to 2026-07-17 22:57 UTC

This page contains 45 additions and 42 deletions.

2026
Tue 14 17:03 Fri 17 22:57 Thu 23 21:57 Fri 24 15:00 Tue 28 23:01

Plugin controls

A plugin extends Codex by packaging skills and optional connectors so teams can distribute workflows and knowledge. Learn more about plugins, skills, and apps and connectors.

When a plugin includes a connector, workspace admins must make the plugin available through plugin controls and configure connector access before members can use the connector-backed capability.

Plugins are available in Work mode in ChatGPT on the web, in Work mode and Codex in the ChatGPT desktop app, and through the Codex CLI plugin browser. Availability on those surfaces doesn't make plugins available in Chat mode, the IDE extension, or mobile.

For the complete administration model, see Roles and workspace permissions.

Understand the capability chain

Each layer has a separate scope and control surface:

Layer What it determines Where to manage it
Plugin availability and installation Whether the plugin bundle is available to the user Workspace settings for supported web and desktop surfaces; the CLI plugin browser for CLI
Bundled skills Which reusable instructions the installed plugin contributes The plugin package and Skill controls
Connector access Whether users can use a connector-backed capability Workspace apps and Permissions & roles
Connector actions and permissions Which actions users can run and when ChatGPT asks before using the connector The connector's Action control and App permissions in Workspace apps
Source-system authorization Which external data and actions the authenticated identity can access The connected service and its identity provider
Runtime permissions What an agent can do after it receives data or a tool The runtime, sandbox, and approval controls for the active surface

Depending on the workflow, admins can govern plugin availability, connector access, connector actions and permissions, provider authorization, and runtime policy independently.

Plugin availability controls

Workspace plugin controls determine whether a plugin is available or installed for supported workspace roles. The Codex CLI plugin browser controls CLI installation through its own path. See Build plugins for packaging and distribution.

Connector-backed capability controls

In ChatGPT, plugins can include connectors that search, retrieve, sync, or act on external systems. Workspace admins configure plugin availability separately from the access and actions granted to each connector.

Manage connector-backed capabilities from Workspace apps and Permissions & roles. Available controls let admins:

  • Enable reviewed connectors and assign access by workspace role.
  • For connectors that support Action control, allow read-only actions or an approved custom set, including how the workspace handles newly added actions.
  • Set App permissions that determine when ChatGPT asks before using a connector.
  • Keep access within the scopes and permissions granted by each connected service and authenticated user.

For current availability and procedures, see Admin controls, security, and compliance in apps.

Choose a starting set of plugins

For a broad initial rollout, consider plugin categories teams use every day: email, calendar, and file or document systems such as Google Drive or Notion. Use the Plugins Directory to confirm current availability and capabilities.

Start with read actions. Enable write actions only after reviewing the plugin's owner, each connector's requested scopes, data access, external effects, and recovery path.

Understand data flow and security

When ChatGPT uses a connector-backed plugin, the connector sends a request to the connected service and returns data or action results allowed by the authenticated user's provider permissions. Custom Apps SDK apps expose these operations as tools through Model Context Protocol (MCP).

For non-synced connector use, ChatGPT processes data from Chat mode and deep research transiently and doesn't index it. Connectors with sync index selected connected content in advance. This indexing distinction doesn't replace normal chat-retention controls; chats that use plugins remain available through the Compliance API.

OpenAI's current connector guidance also documents encryption in transit and at rest, per-user authorization, role and action controls, restricted network access for chats that use plugins, and no model training on information accessed through plugins for Business, Enterprise, and Edu customers. Review the connected service's scopes, retention, and data-residency policies because those policies apply when a request reaches that service.

See app security and compliance and apps with sync for the current data-handling details. For locally configured MCP servers in the ChatGPT desktop app, Codex CLI, or IDE extension, see Codex MCP configuration.

Use current procedures