Making private MCP servers reachable without making them public
What's new
- A new mechanism for connecting private MCP servers to ChatGPT/OpenAI products without making them publicly reachable
- Preserves private network boundaries while supporting MCP streaming
- Adds authentication for private MCP endpoints
- An inspectable client for debugging tool calls and streams
- Goal is to unblock enterprise MCP deployments where compliance/security teams can't approve public exposure
Why it matters
MCP is becoming the de facto standard for tool integrations, but enterprise adoption has been gated on having to expose servers publicly. This shift opens MCP up to regulated industries and internal corporate systems.
How to try it
Read the engineering deep-dive on developers.openai.com/blog and watch the ChatGPT Enterprise settings for private MCP connector options.
Open original source
OpenAI