Quickstart: ChatGPT

ChatGPT connects straight to Guardyx over HTTPS, through a custom MCP connector. You don’t need Node.js, a bridge, or a config file. You paste a URL and a key into ChatGPT’s connector settings.

1. In the Guardyx portal, open My Agents and choose Connect new agent.
2. Under Which app will you chat with?, pick ChatGPT.
3. Choose the apps it should use and what it may do, then connect your accounts.
4. On the last step, copy the Server URL and the API key (gx_live_…). Leave the page open. Its status turns to Connected once ChatGPT reaches Guardyx.

1. In ChatGPT, open Settings → Connectors and choose Add custom connector.

2. Set the type to Streamable HTTP, not STDIO.

3. Server URL: https://app.guardyx.ai/v1/mcp

4. Add a header:

   • Name: Authorization
   • Value: Bearer gx_live_YOUR_KEY

   If ChatGPT shows its own API-key or bearer-token field, paste only the gx_live_… key there, without Bearer.

5. Save. ChatGPT shows the connector as connected once Guardyx answers.

Claude Desktop and Cursor send the key in an X-API-Key header. ChatGPT’s connector can set only the Authorization header, so Guardyx also accepts the agent key as a Bearer token. If you put the key in an X-API-Key header, ChatGPT never sends it, and Guardyx answers 401.

If your ChatGPT has no Streamable HTTP option, use the STDIO tab with the mcp-remote bridge instead. This needs Node.js 18 or later:

• Command: npx
• Arguments: -y mcp-remote https://app.guardyx.ai/v1/mcp --header Authorization:"Bearer gx_live_YOUR_KEY"

1. Look at the portal’s last step. Its status changes to Connected.

2. In a ChatGPT chat, turn on the Guardyx connector and ask for something that uses one of your apps, for example “Summarize my unread email.”

   If ChatGPT answers that no email account is connected, it didn’t look in Guardyx. Your apps sit behind Guardyx’s search tool, so ChatGPT doesn’t see them on its own. Name Guardyx in the request: “Use Guardyx to summarize my unread email.”

3. Open Runs in Guardyx. The call is there, with its inputs, the policy decision, and the outcome.

4. Ask for something your policy holds for review. The request appears in Approvals, and ChatGPT waits while it’s pending. If you don’t decide within about 25 seconds, ChatGPT gets a retry message, and the same call picks up your decision when it is retried.

ChatGPT lists three Guardyx tools: guardyx_search_tools, guardyx_describe_tool, and guardyx_execute_tool. That is expected. ChatGPT finds your toolbox’s tools by searching through them.

What you see	What to do
401 when the connector saves	Use the Authorization: Bearer … header, not X-API-Key. Check that the value starts with Bearer followed by the whole key. In a dedicated token field, leave Bearer out.
You’ve lost the key	Rotate it on the agent page under Authentication → Rotate. Paste the new key into the connector. The old one stops working when you confirm.
“This agent has no bound tools”	Bind a toolbox to the agent on its page in Guardyx.
A tool shows not_connected	Connect that app’s account from the agent page, then retry.

Every AI action passes through Guardyx. Each tool call ChatGPT makes is checked against your policy, sensitive ones wait for your approval, and each request, decision, and outcome is recorded in a tamper-evident run trace.