Skip to content

ChatGPT plugins: installing, invoking, and what you are granting

Where the plugin directory lives, what a plugin is actually made of, which surfaces support them, how to invoke one explicitly with @, and what installing one does and does not authorise.

CurrentLast verified

Platforms

  • ChatGPT on the web
  • ChatGPT desktop app
  • ChatGPT mobile
  • Codex CLI (plugin browser)

What the official documentation says

  • ChatGPT and Codex use one universal plugin directory, so the same public plugins are discoverable from their supported surfaces.

    Plugins
  • Plugins work in Chat and Work across ChatGPT on the web, desktop and mobile, and in Codex in the desktop app; Codex CLI also has a plugin browser; the IDE extension does not support plugins.

    Plugins
  • Plugins marked Desktop only require the ChatGPT desktop app — discoverable on the web, installable and usable only in the desktop app, and not available on mobile.

    Plugins
  • A plugin can contain skills, MCP servers, browser extensions and hooks.

    Plugins
  • Installing a plugin on the web does not deploy hook scripts; those must be available in the execution environment, and enterprise admins can deploy required scripts through MDM.

    Plugins
  • The Plugins Directory organizes plugins into OpenAI, your workspace name, and Personal tabs, with a separate Installed row for plugins you already installed.

    Plugins
  • In Codex CLI, /plugins opens the plugin browser, and pressing Space on an installed plugin turns it on or off.

    Plugins
  • Bundled skills become available when you start a new chat or CLI session after installation.

    Plugins
  • Typing @ invokes a plugin or one of its bundled skills explicitly.

    Skills & Plugins
  • Uninstalling removes the plugin bundle from that ChatGPT or Codex environment, while separately connected MCP server integrations remain connected in ChatGPT until you disconnect them there.

    Plugins
  • Sign in with ChatGPT is in beta and shares only your name, email address and profile picture where available; it does not grant the plugin access to your data or approve actions automatically.

    Plugins
  • The OpenAI developer documentation index lists ChatGPT plugins and the Apps SDK as their own documentation set, covering building plugins with MCP servers, tools, UI components, authentication, metadata, testing, deployment, review and submission.

    OpenAI developer documentation index (llms.txt)

A plugin is a capability bundle, not an app-store app

The documented definition: plugins bundle capabilities into reusable workflows in ChatGPT and Codex, and can include skills, MCP servers and lifecycle hooks.

That sentence is worth reading carefully, because it means installing one plugin can bring in four different kinds of thing:

  • Skills — reusable instructions for specific kinds of work. ChatGPT and Codex load them when needed so they follow the right steps and use the right references or helper scripts.
  • MCP servers — services that connect ChatGPT and Codex to tools and information in systems such as GitHub, Slack or Google Drive. They define tools, enforce authentication, return structured data, and perform actions against external systems. They can optionally include custom UI.
  • Browser extensions — browser capabilities a plugin's workflow needs.
  • Hooks — commands that run at configured lifecycle points in the Codex runtime, including ChatGPT Work and Codex.

The fourth deserves care, and the documentation gives it an explicit instruction: review and trust plugin hooks before they run. There is also an easily-missed fact — installing a plugin on the web does not deploy hook scripts. They must be available in the execution environment; in enterprise settings, admins can deploy them through MDM.

Surface availability differs more than you would expect

| Surface | Plugin support | |---|---| | ChatGPT on the web (Chat / Work) | Yes | | ChatGPT desktop app (Chat / Work / Codex) | Yes | | ChatGPT mobile (Chat / Work) | Yes, for plugins available to your account | | Codex CLI | Plugin browser | | IDE extension | Not supported |

There is also a per-plugin marker that cuts across this: plugins tagged Desktop only require the desktop app. You can discover them on the web, but you must open the desktop app to install and use them, and they are not available on mobile.

Installing, and the timing rule people miss

The flow is short:

  1. Search or browse for a plugin, then open its details.
  2. Select the plus button to install.
  3. If the plugin needs an MCP server connection, connect it when prompted. Some plugins ask you to authenticate during install; others wait until the first time you use them.
  4. After installation, start a new chat, then ask ChatGPT or Codex to use the plugin.

Step 4 is the one that gets skipped. The documentation states it directly: bundled skills become available when you start a new chat or CLI session after installation. Almost every "I installed it but nothing happened" is this.

The directory itself is organised into tabs: OpenAI (plugins built by OpenAI), your workspace name (plugins provided by your workspace), and Personal (personal marketplace plugins, including Created by me and Shared with me). A separate Installed row shows what you already have.

In Codex CLI, /plugins opens the browser. It groups plugins by marketplace, lets you switch sources, open a plugin to inspect details, install or uninstall marketplace entries, and press Space on an installed plugin to turn it on or off.

Two ways to invoke, for two situations

  • Describe the task directly — ask for the outcome, such as "Summarize unread Gmail threads from today" or "Pull the latest launch notes from Google Drive". Use this when you want ChatGPT to choose the right installed tools.
  • Choose a specific plugin — type @ to invoke the plugin or one of its bundled skills. Use this when you want to be specific.

What Sign in with ChatGPT actually shares

The feature is rolling out in beta for supported plugins and partner sites, with Airtable, GitLab, HubSpot, Notion, Supabase and Vercel named in the documentation.

Its boundary matters. Signing in shares only your name, email address and profile picture, when available, with the partner. It does not grant the plugin access to your data, and it does not approve actions automatically. Reviewing and approving the plugin's requested permissions is a separate step.

Permissions and where your data goes

The documentation splits this by surface:

  • On the web, Chat and Work use the workspace permissions and tools available to that chat. MCP servers still require their own sign-in and access.
  • In the desktop app and CLI, when a plugin capability runs through a Codex host, that host's sandbox and approval policy applies. Connections to external services use that service's own authentication and access controls.
  • Universally: when ChatGPT sends data through an MCP server, that service's terms and privacy policy apply.

What survives an uninstall

Uninstalling removes the plugin bundle from that ChatGPT or Codex environment. Two things do not happen automatically:

  1. Separately connected MCP server integrations stay connected in ChatGPT until you disconnect them there.
  2. Workspace-installed or default plugins may offer no uninstall action at all — your workspace administrator controls those.

How to do it

  1. Open the Plugins tab to browse the directory on the web or in the desktop app, or type /plugins in Codex CLI.
  2. Search or browse for a plugin, then open its details.
  3. Select the plus button to install it.
  4. If the plugin needs an MCP server connection, connect it when prompted. Some plugins ask you to authenticate during install; others wait until first use.
  5. After installation, start a new chat — or a new CLI session — before the bundled skills become available.
  6. Then either describe the task directly and let ChatGPT choose the tools, or type @ to invoke a specific plugin or bundled skill.

On Windows

  1. The Windows desktop app supports plugins, with the directory under the same Plugins tab.
  2. Plugins marked Desktop only carry the same restriction on Windows — discoverable on the web, installable and usable only in the desktop app.
  3. Note that the Apple Messages plugin is macOS-only and ships only in the Apple Silicon (arm64) build of the desktop app, so it does not apply on Windows.

On mobile

  1. The documentation states that on mobile you can use plugins available to your account in Chat or Work.
  2. Plugins marked Desktop only are not available on mobile.
  3. Desktop-specific capabilities such as Apple Messages do not appear on a phone.

Use cases

  • Installing the Gmail plugin so ChatGPT can summarise today's unread threads.
  • Installing the Google Drive plugin to pull material across Drive, Docs, Sheets and Slides.
  • Installing the Slack plugin to summarise channels or draft replies.
  • Installing the Codex Security plugin to scan authorized code and confirm plausible vulnerability findings.

Common mistakes

  • Trying the plugin in the chat you already had open. Bundled skills only become available in a **new** chat or CLI session.
  • Installing a hook-bearing plugin on the web and expecting the hook scripts to run. Installing on the web does not deploy them.
  • Looking for plugins in the IDE extension. It does not support them — use the desktop app or Codex CLI.
  • Treating Sign in with ChatGPT as an authorisation step. It shares name, email and profile picture; the plugin's permissions are a separate review.
  • Assuming uninstalling a plugin also disconnects its MCP server integration.

FAQ

What is a plugin actually made of?
Four documented parts: skills (reusable instructions for specific kinds of work, loaded when needed so the right steps, references and helper scripts are used); MCP servers (services connecting ChatGPT and Codex to tools and information in systems such as GitHub, Slack or Google Drive — they define tools, enforce authentication, return structured data and perform actions against external systems, optionally with custom UI); browser extensions; and hooks (commands that run at configured lifecycle points in the Codex runtime).
What should I know about hooks?
Two things. Hook scripts must be available in the execution environment — installing a plugin on the web does not deploy them, and enterprise admins can deploy required scripts through MDM. And the documentation states plainly that you should review and trust plugin hooks before they run.
How do I pick a specific plugin?
Type @ to invoke the plugin or one of its bundled skills. The documented choice is simple — describe the task directly when you want ChatGPT to select the right installed tools, and use @ when you want to be specific about which plugin or skill it should use.
Do plugins work when I sign in with an API key?
The documentation states that if you sign in to Codex with an OpenAI API key you can browse, install and manage supported OpenAI-curated plugins in Codex CLI and in Codex in the desktop app. Some plugins are not available with API key authentication because their connection flows require unsupported OAuth capabilities.
What is left behind after I uninstall?
Uninstalling removes the plugin bundle from that ChatGPT or Codex environment. Separately connected MCP server integrations remain connected in ChatGPT until you disconnect them there. Workspace-installed or default plugins may not offer an uninstall action at all — your workspace administrator controls those.

Official sources

These are the pages this tutorial is checked against. Follow them if you need the vendor's exact wording.

Source status