CRM
ChatGPT App review notes

CRM for ChatGPT

CRM lets teams ask ChatGPT about their connected WhatsApp communication history, find source messages, create summaries, save documents, and generate share links when a report needs to leave ChatGPT.

Capabilities

Find conversations

List connected WhatsApp groups and conversations captured by the CRM workspace.

Answer conversation questions

Search messages by chat, text, date range, sender, and media attachments.

Create reports

Create issue notes, follow-up lists, weekly summaries, and customer notes from source messages.

Save and share

Save generated documents back to CRM and create share links only when the user asks.

Architecture

The ChatGPT app uses a dedicated MCP endpoint separate from the generic MCP endpoint used by Claude, Codex, Cursor, and other developer tools.

ChatGPT MCP endpoint:
https://whatan.app/api/chatgpt/mcp

Generic MCP endpoint:
https://whatan.app/api/mcp

The ChatGPT endpoint exposes the same CRM tools, plus ChatGPT-specific metadata, output schemas, OAuth discovery, and a compact widget resource for conversation/message/report results.

OAuth flow

ChatGPT discovers authentication by calling the MCP endpoint and receiving a bearer challenge that points to protected resource metadata.

Protected resource metadata:
https://whatan.app/.well-known/oauth-protected-resource

Authorization server metadata:
https://whatan.app/.well-known/oauth-authorization-server

The implemented flow supports:

  • OAuth protected resource metadata discovery
  • OAuth authorization server metadata discovery
  • Dynamic client registration
  • Authorization code with PKCE
  • Bearer token access to the ChatGPT MCP endpoint

Reviewer flow

  1. Create a new ChatGPT app connector.
  2. Use OAuth authentication.
  3. Use https://whatan.app/api/chatgpt/mcp as the MCP server URL.
  4. Continue the OAuth connection flow.
  5. If a real CRM dashboard session is not available, use the demo workspace option on the CRM authorization page.
Suggested test prompts
  • List my WhatsApp conversations.
  • What happened today on Palm Heights?
  • Find open issues from the Riverside Villas account.
  • Create a daily report and save it.
  • Create a share link for the saved report.

Safety posture

No outbound messaging

The ChatGPT app does not send WhatsApp messages. It reads captured workspace data and writes saved reports only.

Controlled sharing

Share links are created only through an explicit tool call when the user asks for something shareable.

For public review, the value proposition should be framed as WhatsApp conversation intelligence and reporting over already connected workspace data.

Submission checklist

  • OpenAI Platform organization is verified.
  • Production MCP endpoint is reachable over HTTPS.
  • OAuth discovery, registration, authorization, and token exchange work.
  • Demo workspace is seeded and contains fake CRM data.
  • Privacy policy URL and company website URL are ready.
  • App icon, screenshots, test prompts, and reviewer notes are ready.

See the demo guide for reviewer-specific setup notes.