ChatGPT connectors are secure links that let ChatGPT read from, and act in, other software. OpenAI renamed connectors to "apps" in December 2025, and since July 2026 you add them from ChatGPT's Plugin Directory, where a plugin can bundle one or more apps with skills. The label changed. The idea did not: connect a tool once, then ask ChatGPT to work with it from the chat.
For a business owner, the question is not "what is a connector?" It is "if I connect ChatGPT to my invoices and customers, what can it see, what can it change, and can I switch it off?"
This guide explains how ChatGPT connectors work, how to add one, the difference between a published plugin and a custom connector, and an eight-question safety checklist to run before you connect business data.
See the InvoicifyAI ChatGPT plugin
Related: ChatGPT for Small Business, Claude for Small Business, AI Agents for Small Business, and MCP documentation
Table of Contents
- What Is a ChatGPT Connector?
- Connectors, Apps, Plugins: What Changed
- How a Connector Works
- How to Add a Connector to ChatGPT
- Published Plugin vs Custom Connector
- Are ChatGPT Connectors Safe? 8 Questions to Ask First
- What the InvoicifyAI Plugin Can and Cannot Do
- Frequently Asked Questions
What Is a ChatGPT Connector?
A ChatGPT connector is a secure link between ChatGPT and another piece of software. Once connected, ChatGPT can look things up in that software and, if the connector allows it, take actions there, all from the chat.
Without a connector, ChatGPT only knows what you paste in. With one, you can ask "Which customers have open estimates from last month?" and the answer comes from your actual records.
Connectors, Apps, Plugins: What Changed
If you searched for "ChatGPT plugins" and found 2023 articles, that is why the naming is confusing. Here is the short history:
| When | What happened |
|---|---|
| March 2023 | OpenAI launches the first ChatGPT plugins in beta |
| April 2024 | Those original plugins are retired in favor of GPTs |
| May 2025 | The first ChatGPT connectors arrive, starting with deep research |
| October 2025 | Apps in ChatGPT launch, with an Apps SDK built on the Model Context Protocol |
| December 2025 | The app directory opens and connectors are renamed apps |
| July 2026 | The Plugin Directory replaces the App Directory. Existing app connections keep working |
Source: ChatGPT release notes and OpenAI announcements.
Today, OpenAI describes a plugin as a package that "can include one or more apps, skills, or both." In practice, when a business software company says "our ChatGPT plugin," it means you install it from the Plugin Directory and connect your account. The same plugin directory also serves Codex, OpenAI's coding agent.
How a Connector Works
Most ChatGPT connectors are built on the Model Context Protocol (MCP), an open standard for connecting AI agents to software. The software company runs an MCP server that offers a list of tools, such as "list overdue invoices" or "create a draft estimate." ChatGPT decides which tool fits your request and calls it.
Access is granted with OAuth, the same sign-in consent pattern you see with "Sign in with Google." You sign in to the business software, review what ChatGPT is asking to do, and approve it. ChatGPT never sees your password.
| Piece | What it does |
|---|---|
| ChatGPT | Understands your request and picks a tool |
| MCP server | The software company's list of tools, with its own rules |
| OAuth consent | You approve what the connection may read and change |
| Your account role | Limits what the connection can do, the same way it limits you |
| Approval settings | Your ChatGPT permission level, plus the software's own instructions, decide when you are asked before sensitive actions |
How to Add a Connector to ChatGPT
- Open Plugins: In ChatGPT on the web, desktop, or mobile, open Plugins in the sidebar.
- Find the plugin: Search for the software you use and open its listing. Read what it says it can do.
- Install and connect: Choose Install, then Connect. ChatGPT sends you to the software's sign-in page.
- Review the permissions: Check which account or company you are connecting and what the plugin may read and change, then approve.
- Use it in a chat: Mention the plugin by name or pick it from the plus menu, and start with a read-only question.
- Manage or remove it: Change or disconnect the account later in ChatGPT's Settings, under Plugins, and in the software's own settings.
ChatGPT also lets you choose how much a plugin may do without asking: always ask, allow reads, allow low-risk actions, or allow all. For business records, start with "always ask" or "allow reads" and loosen it only when you trust the results.
Published Plugin vs Custom Connector
There are two ways to connect ChatGPT to a business tool:
| Published plugin | Custom MCP server | |
|---|---|---|
| Where you find it | ChatGPT's Plugin Directory | You add the server URL yourself |
| Who reviewed it | Listed through OpenAI's submission process | Nobody but you. ChatGPT asks you to acknowledge the risk |
| Who can add it | Most ChatGPT plans, subject to admin controls | Business and Enterprise or Edu workspaces on the web, with read-only access on Pro, per OpenAI's help center |
| On team plans | Admins choose which plugins members can install | On Business, only admins and owners can create and publish one |
| Best for | Most business owners | Testing, or tools with no published plugin yet |
To add a custom server, open Plugins, choose the plus button, choose to add a custom MCP server, enter the URL and sign-in method, accept the risk notice, and create it as a plugin. OpenAI updates plan details often, so check its help center for your plan.
A published plugin is the simpler and safer default. Even an "OpenAI Verified" badge, in OpenAI's own words, does not replace your own review of what a plugin can do.
What ChatGPT shares with a plugin. OpenAI says connected apps may receive relevant parts of your chat and memories, plus technical details such as your IP address, device, and approximate location. That data then falls under the app maker's own terms. On Business, Enterprise, and Edu plans, OpenAI says data from apps is not used for training by default. On Free, Go, Plus, and Pro, it may be used if "Improve the model for everyone" is turned on.
Are ChatGPT Connectors Safe? 8 Questions to Ask First
A connector is as safe as the rules behind it. Before you connect business data, ask the software company these eight questions:
1. What can it read?
Can it see every customer and invoice, or only what your role allows? A connector should never see more than you could in the app yourself.
2. What can it change?
Reading invoices is one thing. Creating, sending, or deleting them is another. Look for a clear list of write actions.
3. Does it ask before sending or charging?
Anything that leaves your business, such as an emailed invoice or a recorded payment, should wait for your confirmation in the chat, every time.
4. Is data kept to your company?
If the software serves many businesses, each connection should only reach your company's records. Ask how that is enforced on the server, not just in the app.
5. Do roles still apply?
A team member with view-only access should not gain edit rights by connecting ChatGPT. The connector should inherit your role.
6. What happens if a request is retried?
Chat sessions time out. A well-built connector uses idempotency keys, so retrying the same request with the same key returns the first result instead of making a second invoice. After a timeout, check whether the record already exists before asking again.
7. Can you disconnect it?
You should be able to revoke the connection at any time, from the software side as well as from ChatGPT.
8. Is there a record of what it did?
You should be able to see what the connector created or changed, and when.
If a connector cannot answer these clearly, do not connect it to customer or financial data.
Two things stay true for any connector: do not paste card numbers or passwords into a chat, and review your ChatGPT data settings and your plan's data terms, especially if you handle health or other sensitive personal information.
What the InvoicifyAI Plugin Can and Cannot Do
Here is how the InvoicifyAI ChatGPT plugin answers the checklist:
- Sign-in consent. You connect with OAuth. There is no API key to copy around.
- Permissions by area. The consent screen groups access into areas such as Customers and CRM, Sales and payments, Service scheduling, Finance, and Documents and calls.
- One company, your role. Each connection reaches one company's records. Viewers can only read, and changes need at least a Member role.
- What it reads. Customers, invoices, estimates, receivables, revenue, expenses, CRM pipeline, service requests, stored appointments, documents, and AI call summaries and transcripts. What it can reach also follows your InvoicifyAI plan, so CRM data needs a plan that includes the CRM.
- What it can create or update. Customers, CRM tasks and opportunities, service requests, expenses, unsent invoice and estimate drafts, and Call for Me requests. Each kind of change is its own permission you approve.
- What needs extra care. Emailing invoices and estimates, recording a payment you already received, and converting an accepted estimate to an invoice each need their own permission. InvoicifyAI instructs ChatGPT to show a summary and ask for your confirmation in the chat before every send or payment. These are instructions to the AI, not a separate approval screen, so keep the plugin on "always ask" for anything that sends documents or records money.
- Safe retries. Every change carries an idempotency key. Retrying with the same key and the same details returns the original result instead of creating a duplicate.
- A record. Every change it makes is recorded against your user account.
- Disconnect anytime. In InvoicifyAI, go to Settings, then Integrations, then Disconnect. Access ends right away, and changes already made stay. Calls already scheduled through Call for Me still go ahead, so cancel those separately. Owners can also disconnect a teammate's connection.
What it cannot do: book, reschedule, or cancel appointments, edit invoice drafts, charge cards, create payment links, or send texts.
The full tool list, permission scopes, and troubleshooting steps are in the MCP documentation. InvoicifyAI also connects to Claude as a custom connector and to Meta Muse in preview.
Want to try it on your own records? Start a 7-day trial with a card, then add the plugin from ChatGPT. You will not be charged for the subscription until the trial ends.
ChatGPT is a product of OpenAI. InvoicifyAI is not affiliated with or endorsed by OpenAI.
Frequently Asked Questions
What are ChatGPT connectors?
ChatGPT connectors are secure links between ChatGPT and other software. They let ChatGPT look up information and, where permitted, take actions in that software from the chat. Most are built on the Model Context Protocol (MCP) and use OAuth sign-in consent.
Are ChatGPT connectors the same as plugins?
Almost. OpenAI renamed connectors to apps in December 2025, and since July 2026 you install them from the Plugin Directory, where a plugin can package one or more apps and skills. The original 2023 ChatGPT plugins were a different system and were retired in 2024.
What is a ChatGPT MCP server?
An MCP server is the part of a software product that offers tools to AI agents such as ChatGPT. A ChatGPT connector or plugin talks to the company's MCP server, which decides what each tool may read or change for your account.
Are ChatGPT connectors safe for business data?
They can be. Check what the connector can read and change, whether it asks before sending or recording payments, whether access is limited to your company and role, whether retries are handled safely, and whether you can disconnect it. If those answers are unclear, do not connect it to customer or financial data.
Can a ChatGPT connector send invoices or move money?
That depends on the connector. The InvoicifyAI plugin can email invoices and estimates and record a payment you already received, but only with those separate permissions, and InvoicifyAI instructs ChatGPT to confirm a summary with you in the chat first. It does not move money. It cannot charge cards or create payment links, because InvoicifyAI records payments you received rather than processing them.
How do I disconnect a ChatGPT connector?
You can remove it from ChatGPT's settings, and most business software also lets you revoke the connection from its own settings. InvoicifyAI connections can be revoked at any time. Disconnecting does not cancel calls already scheduled through Call for Me, so cancel those in Call for Me.