Sites 托管 MCP 的后端能力与限制
拆解 ChatGPT Sites 托管 MCP 的存储、插件权限范围,以及不支持 TCP、私有网络、无数据驻留等合规缺口。
OpenAI has already answered the backend question nobody answered. ChatGPT Sites, in public beta across Plus through Edu, now hosts MCP servers and plugin extensions: you describe the tool in chat, it builds the MCP server, deploys it to a Site, wraps it as a plugin, and installs it across web, mobile and desktop. Sites is more than static hosting. OpenAI's own docs list a site shape for 'saved records, user progress, or game scores' that is D1, a relational database, alongside R2, object storage, with 10 GB on the database and no fixed limit on files. Plugins can be shared owner-only, to selected users or groups, to invited external viewers, to the workspace, or to the internet where public publishing is enabled — which is off by default in Enterprise. What Sites does not give you matters as much. Raw inbound and outbound TCP are unsupported. Private networks and background services are not supported. And it launches with no data residency or inference residency at all, covering deployed code, D1 and R2 data, generated artifacts and logs. So the backend exists and the compliance boundary does not. Per OpenAI's docs. https://learn.chatgpt.com/docs/sites