Plugin listed to the whole workspace bundles an MCP server
AI summary
Rencore flags when a ChatGPT plugin is listed to your entire workspace and bundles an MCP server. This is a security risk because any member can install it and open a connection to external endpoints your workspace does not control.
What it detects
Detects discoverable plugins that install an MCP server any member can reach.
Why it matters
A listed plugin is installable by any member without being told about it. When it also bundles an MCP server, every installation opens a channel to an external endpoint the workspace does not control. Plugins are read-only through the API, so remediation means changing the discoverability or installation policy in the OpenAI console.
The rule
Every ChatGPT Plugin where Discoverability equals 'LISTED' and MCP Server Count is greater than 0
In Rencore Governance
Details
| Applies to | ChatGPT plugin |
|---|---|
| Connector | ChatGPT Enterprise |
| Severity | High |
| Category | External Access |
| Recommended | Yes |
| Recommended automation | None |
| License type | Standard |
Frequently asked questions
What does the plugin listed to the whole workspace bundles an MCP server policy detect?
The Plugin listed to the whole workspace bundles an MCP server policy detects discoverable plugins that install an MCP server any member can reach.
Which objects does the plugin listed to the whole workspace bundles an MCP server policy check?
The Plugin listed to the whole workspace bundles an MCP server policy checks ChatGPT plugin objects from the ChatGPT Enterprise inventory and reports each one that matches its rule as a violation.
How severe is a violation of the plugin listed to the whole workspace bundles an MCP server policy?
Violations of the Plugin listed to the whole workspace bundles an MCP server policy have High severity. The policy is in the External Access category.
Which module includes the plugin listed to the whole workspace bundles an MCP server policy?
The Plugin listed to the whole workspace bundles an MCP server policy comes with the ChatGPT Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?