Explicit access
OAuth 2.1, PKCE, short-lived access tokens, and scope checks on every tool call.
Private developer infrastructure
Your workspace, within reach.
A deliberately small bridge between ChatGPT and a dedicated development runner. Files stay in your workspace; authorization stays under your control.
Isolated execution
The public gateway never mounts the workspace. Runner communication stays on a Unix socket.
Visible intent
Read, write, destructive, and network-aware tools remain distinct for clear approvals.