ChatGPT (browser/app)
ChatGPT in web browser or mobile app. Runs in OpenAI's hosted environment. File writes and code execution are confined to a session sandbox the user does not own.
Agent Passport
APAI.agent-passport.v0.1Agent Passport
cloud-sandboxunverified v0.1
Agent: ChatGPT (browser/app)Vendor: OpenAIVersion: varies (hosted, rolling)
Install modes:cloud-sandbox
↓
Can read
- ·User-supplied text in the conversation
- ·Files uploaded by the user for the session
- ·Web pages (via Bing-powered web browse tool, when enabled)
- ·Operator-configured knowledge base or custom GPT instructions
↑
Can write
- ·Session sandbox only (code interpreter output: files, images, CSVs downloadable by user; not persisted after session)
↔
Can access
- ·OpenAI first-party tools: code interpreter, DALL-E image gen, Bing web browse
- ·User-configured MCP connectors via ChatGPT Apps SDK (when available in account)
- ·Operator-configured plugins or GPT Actions declared in the GPT definition
$
Can spend
- ·User's ChatGPT subscription quota (GPT-4o messages per period)
- ·No direct money transfer initiated by the agent
○
Can expose
- ·Conversation content sent to OpenAI API for inference
- ·Files uploaded by the user included in API context
- ·GPT Action calls may send data to third-party endpoints per the GPT's action schema
✓
Will request approval for
- ·GPT Actions that require user confirmation per the action's confirmation schema
- ·File downloads offered to user rather than auto-downloaded
v0.1 note: This passport is descriptive, not enforceable. Runtime enforcement is the Policy Pack + Gateway story (Phase 4+). Fields sourced from publicly documented agent behavior as of May 2026.
Compatible packages (v0.1)
APAI packages that declare support for hosted chat platforms compatible with this agent. v0.1 match is by platform overlap; full capability-field matching ships with Phase 4.