Endpoint: /mcp
Authentication: OAuth 2.1 authorization code flow with PKCE S256.
Owner connections run as the unprivileged Linux user ad12345. Invited Free Beta profiles use per-user isolated workspaces with no owner-file or network access. The OpenAI reviewer profile uses only an isolated in-memory demo environment.
Owner-only OpenAI Browser Assist uses BrowserAct and is restricted to OpenAI/ChatGPT HTTPS pages. It does not handle CAPTCHA, passwords, MFA, API keys, payment-card fields, or arbitrary browser JavaScript.
Process execution uses an explicit argv list and adds no implicit shell.