ChatGPT App review notes

WhatSync Construction for ChatGPT

WhatSync lets construction teams ask ChatGPT about their connected job-site communication history, find source messages, create daily reports, save documents, and generate share links when a report needs to leave ChatGPT.

Capabilities

Find projects

List connected site groups and projects captured by the WhatSync construction workspace.

Answer project questions

Search messages by project, text, date range, sender, and media attachments.

Create reports

Create issue reports, daily logs, weekly summaries, and project notes from source messages.

Save and share

Save generated documents back to WhatSync and create share links only when the user asks.

Architecture

The ChatGPT app uses a dedicated MCP endpoint separate from the generic MCP endpoint used by Claude, Codex, Cursor, and other developer tools.

ChatGPT MCP endpoint:
https://construction.whasupcrm.com/api/chatgpt/mcp

Generic MCP endpoint:
https://construction.whasupcrm.com/api/mcp

The ChatGPT endpoint exposes the same construction tools, plus ChatGPT-specific metadata, output schemas, OAuth discovery, and a compact widget resource for project/message/report results.

OAuth flow

ChatGPT discovers authentication by calling the MCP endpoint and receiving a bearer challenge that points to protected resource metadata.

Protected resource metadata:
https://construction.whasupcrm.com/.well-known/oauth-protected-resource

Authorization server metadata:
https://construction.whasupcrm.com/.well-known/oauth-authorization-server

The implemented flow supports:

  • OAuth protected resource metadata discovery
  • OAuth authorization server metadata discovery
  • Dynamic client registration
  • Authorization code with PKCE
  • Bearer token access to the ChatGPT MCP endpoint

Reviewer flow

  1. Create a new ChatGPT app connector.
  2. Use OAuth authentication.
  3. Use https://construction.whasupcrm.com/api/chatgpt/mcp as the MCP server URL.
  4. Continue the OAuth connection flow.
  5. If a real WhatSync dashboard session is not available, use the demo workspace option on the WhatSync authorization page.
Suggested test prompts
  • List my construction projects.
  • What happened today on Palm Heights?
  • Find open issues from the Riverside Villas project.
  • Create a daily report and save it.
  • Create a share link for the saved report.

Safety posture

No outbound messaging

The ChatGPT app does not send WhatsApp messages. It reads captured workspace data and writes saved reports only.

Controlled sharing

Share links are created only through an explicit tool call when the user asks for something shareable.

For public review, the value proposition should be framed as construction project intelligence and reporting over already connected workspace data.

Submission checklist

  • OpenAI Platform organization is verified.
  • Production MCP endpoint is reachable over HTTPS.
  • OAuth discovery, registration, authorization, and token exchange work.
  • Demo workspace is seeded and contains fake construction data.
  • Privacy policy URL and company website URL are ready.
  • App icon, screenshots, test prompts, and reviewer notes are ready.

See the demo guide for reviewer-specific setup notes.