HeptaCert ChatGPT plugin package
The portable manifest for submitting HeptaCert to the OpenAI Plugins Directory.
The plugin is the hosted MCP server at https://heptacert.com/mcp plus the six
inline UI components it serves; there is no separate runtime in this folder.
| File | Purpose |
|---|---|
plugin.json | Listing metadata, legal links and starter prompts |
mcp.json | Points the plugin at the hosted streamable-HTTP MCP endpoint |
assets/logo.png | Copy of frontend/public/logo.png, referenced as icon and logo |
Related code: backend/src/mcp_server.py (tools, schemas, component wiring),
backend/src/mcp_widgets/ (the components), backend/src/oauth_api.py and
oauth_metadata_api.py (OAuth + discovery + domain verification).
Confirm before submitting
These values are taken from what the repository already publishes. A human should confirm each one against the account actually submitting, because reviewers check that they match the verified publisher identity:
author.email—destek@heptacert.com, the address on the public developers page. Confirm it is monitored for plugin support.privacyPolicyURL/termsOfServiceURL— the live/gizlilikand/kullanim-kosullaripages. These are Turkish-language pages and were written for the web product, not for a ChatGPT plugin. They have not been reviewed for whether they cover data shared with OpenAI. No legal counsel has approved them for this purpose.category—Productivityis a guess; pick from the portal's list.version— bump on every resubmission.assets/logo.pngis 738 KB. Check the portal's size and aspect requirements and re-export if it rejects the file.
Environment the deployment needs
| Variable | Why |
|---|---|
HEPTACERT_WIDGET_ORIGIN | Origin declared to OpenAI for the UI components (ui.domain). Defaults to the public origin. |
OPENAI_APPS_CHALLENGE_TOKEN | Per-plugin domain-verification token from the submission portal. Until it is set, /.well-known/openai-apps-challenge returns 404. |
Full status, open questions and the acceptance matrix live in
docs/work-packages/WP37-openai-chatgpt-mcp-audit.md.