ChatGPT plugin

Last updated Oct 17, 2026 Preview Inventory

AI summary

Rencore Governance tracks ChatGPT plugins with 28 properties including discoverability, bundled MCP servers, and risk scores. You can see which plugins are discoverable to all workspace members, which external endpoints they install as MCP servers, and authentication settings. A security policy detects when discoverable plugins bundle MCP servers, since any workspace member can then reach those external endpoints.

Plugins in the ChatGPT workspace, their discoverability and the MCP servers and skills they bundle

Part of the ChatGPT Enterprise inventory.

In Rencore Governance

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Daily	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

28 properties in 8 groups. Open a group to see its properties.

Name and identity 4

Property	Type	Description	Automation placeholder
Display Name	String		`{{ChatGPTPlugin.DisplayName}}`
ID	String		`{{ChatGPTPlugin.Id}}`
Marketplace	String	Which marketplace the plugin came from.	`{{ChatGPTPlugin.MarketplaceName}}`
Version	String		`{{ChatGPTPlugin.Version}}`

Organization and location 2

Property	Type	Description	Automation placeholder
Workspace	ChatGPT Workspace		`{{ChatGPTPlugin.Workspace}}`
Workspace Name	String		`{{ChatGPTPlugin.WorkspaceName}}`

Activity and usage 3

Property	Type	Description	Automation placeholder
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	`{{ChatGPTPlugin.LastModifiedTime}}`
MCP Server Count	Int32		`{{ChatGPTPlugin.McpServerCount}}`
Status	String		`{{ChatGPTPlugin.Status}}`

AI and agents 2

Property	Type	Description	Automation placeholder
Bundled Skills	String		`{{ChatGPTPlugin.BundledSkills}}`
Display Name	String	The name shown to users, which can differ from the plugin's internal name.	`{{ChatGPTPlugin.PluginDisplayName}}`

Dates and scanning 2

Property	Type	Description	Automation placeholder
Created At	DateTime		`{{ChatGPTPlugin.CreatedAt}}`
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	`{{ChatGPTPlugin.CreatedTime}}`

Property	Type	Description	Automation placeholder
M365 Creator	User		`{{ChatGPTPlugin.CreatedByM365User}}`
M365 Creator Name	String		`{{ChatGPTPlugin.CreatedByM365UserName}}`
Creator	ChatGPT user		`{{ChatGPTPlugin.CreatedByUser}}`
Creator Name	String		`{{ChatGPTPlugin.CreatedByUserName}}`
Has Share URL	Boolean	True when the plugin carries a share link, which lets it spread beyond the people it was granted to.	`{{ChatGPTPlugin.HasShareUrl}}`
Share Principals	Int32		`{{ChatGPTPlugin.SharePrincipalCount}}`

Security and compliance 6

Property	Type	Description	Automation placeholder
Key	String	Internal.	`{{ChatGPTPlugin.ApiKeyEncrypted}}`
Authentication Policy	String		`{{ChatGPTPlugin.AuthenticationPolicy}}`
Installation Policy	String	Who may install the plugin.	`{{ChatGPTPlugin.InstallationPolicy}}`
Risk Score	Int32	Stores risk score	`{{ChatGPTPlugin.RiskScore}}`
Risk Score Update	DateTime	Stores risk score update	`{{ChatGPTPlugin.RiskScoreLastUpdate}}`
Risk Score Value	String	Stores risk score value like Low_Low	`{{ChatGPTPlugin.RiskScoreValue}}`

Other properties 3

Property	Type	Description	Automation placeholder
App IDs	String		`{{ChatGPTPlugin.AppIds}}`
Discoverability	String	How findable the plugin is. LISTED means every workspace member can find and install it without being told. Allowed values: LISTED, PRIVATE, UNLISTED.	`{{ChatGPTPlugin.Discoverability}}`
MCP Servers	String	MCP servers the plugin installs. Each is an external endpoint the workspace now talks to.	`{{ChatGPTPlugin.McpServers}}`

Relations

Relation	Connector	Description
ChatGPT group	ChatGPT Enterprise	The ChatGPT group the plugin is shared with.
ChatGPT user	ChatGPT Enterprise	Every user in the connected ChatGPT workspace, with role, seat, spend and the Entra ID join
ChatGPT user	ChatGPT Enterprise	The ChatGPT user the plugin is shared with.
ChatGPT Workspace	ChatGPT Enterprise	The connected ChatGPT Enterprise workspace, its granted scopes and its coverage gaps
User	Microsoft 365	All users registered in your tenant (internal, external)

Segments

Segment	Description
Plugins listed to the whole workspace	Plugins any workspace member can find and install without being told about them
Plugins bundling MCP servers	Plugins that install an MCP server, and therefore an external endpoint the workspace talks to

Actions

This object does currently not have any actions.

Policy	Severity	Description
Plugin listed to the whole workspace bundles an MCP server	High	Detects discoverable plugins that install an MCP server any member can reach

Frequently asked questions

What is the ChatGPT plugin object in Rencore Governance?

Plugins in the ChatGPT workspace, their discoverability and the MCP servers and skills they bundle. ChatGPT plugin is an object type in the ChatGPT Enterprise inventory of Rencore Governance.

Which properties does Rencore Governance collect for ChatGPT plugin?

Rencore Governance collects 28 properties for ChatGPT plugin, such as Key, App IDs, Authentication Policy and 24 more.

Which policies check ChatGPT plugin objects?

1 built-in policy checks ChatGPT plugin objects, such as Plugin listed to the whole workspace bundles an MCP server.

How often is ChatGPT plugin scanned?

By default daily. You can change the scan interval of ChatGPT plugin objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which module includes the ChatGPT Enterprise connector?

The ChatGPT Enterprise connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is in preview.

Was this page helpful?