OpenAI MCP 扩展将插件引入 ChatGPT 侧边栏

// 在 MCP 工具定义中注册 ChatGPT UI 入口点
import { OpenAIUiToolMetadata } from "@openai/mcp-extensions";

const toolMetadata = {
  ui: { resourceUri: "ui://parts/library" },
  "openai/ui": {
    entrypoints: [{ type: "global" }],
  }
} satisfies OpenAIUiToolMetadata;

+-----------------------------------------------------------------------+
|                          ChatGPT 桌面客户端 UI                         |
| (运行未经信任的 JS，仅持有用以标识的句柄: "ui://file/ref-892")          |
+-----------------------------------------------------------------------+
                                   |
                                   v  被 ChatGPT 客户端拦截并补充权威元数据
+-----------------------------------------------------------------------+
|                        ChatGPT 宿主客户端引擎                          |
| 注入验证后的服务端真实路径:                                              |
| _meta["openai/resource"].path = "/Users/admin/docs/schema.json"      |
+-----------------------------------------------------------------------+
                                   |
                                   v  通过 JSON-RPC 通道传输
+-----------------------------------------------------------------------+
|                        后端 MCP 工具服务器                              |
| (安全的后端代码读取 _meta 中的真实路径并执行读取/写入)                   |
+-----------------------------------------------------------------------+

// 在 MCP 服务端安全处理文件写入请求
import { Server } from "@modelcontextprotocol/sdk/server/index.js";

interface SafeWriteParams {
  resourceUri: string;
  content: string;
  ifMatch?: string;
  _meta?: {
    "openai/resource"?: {
      path?: string;
    };
  };
}

async function handleFileWrite(params: SafeWriteParams) {
  const absolutePath = params._meta?.["openai/resource"]?.path;
  
  if (!absolutePath) {
    throw new Error("未授权：宿主未能提供经过验证的服务端路径。");
  }

  // 检查 ETag 匹配情况
  const currentETag = await computeETag(absolutePath);
  if (params.ifMatch && params.ifMatch !== currentETag) {
    return {
      success: false,
      error: "PreconditionFailed: 文件已被其他进程修改。"
    };
  }

  await writeToDisk(absolutePath, params.content);
  return { success: true, newETag: await computeETag(absolutePath) };
}

import { Server } from "@modelcontextprotocol/sdk/server/index.js";
import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";

let clientSupportsOpenAIUi = false;

const server = new Server(
  { name: "enterprise-data-server", version: "1.0.0" },
  { capabilities: { tools: {} } }
);

// 处理工具列表请求时动态注入元数据
server.setRequestHandler(ListToolsRequestSchema, async () => {
  const tools = [
    {
      name: "query_database",
      description: "执行安全的只读 SQL 查询。",
      inputSchema: {
        type: "object",
        properties: {
          sqlQuery: { type: "string" }
        },
        required: ["sqlQuery"]
      },
      // 仅在宿主支持时注入特有 UI 元数据
      ...(clientSupportsOpenAIUi ? {
        _meta: {
          "openai/ui": {
            entrypoints: [{ type: "global" }]
          }
        }
      } : {})
    }
  ];

  return { tools };
});

// 检查客户端能力
export function checkCapabilities(hostCapabilities: Record<string, any>) {
  if (hostCapabilities?.experimental?.["openai/resource"]) {
    clientSupportsOpenAIUi = true;
  }
}