ChatGPT | Docs | American Cloud

This guide connects ChatGPT to American Cloud through the hosted MCP server, so ChatGPT can inspect and manage your infrastructure in a conversation. ChatGPT connects to remote servers only, so there is no local-server path for it.

[ Prerequisites ]

An American Cloud account. You sign in with it during setup.
A ChatGPT plan that allows custom MCP servers, with Developer mode turned on. On a Business or Enterprise workspace, an admin must allow custom servers first.
The ChatGPT web app. Custom servers are added on the web, then available in the apps.

Connect

Turn on Developer mode. Open Settings, then Connectors and Advanced. If the toggle is not there, look under Security and login. Close and reopen Settings after you turn it on.
Open chatgpt.com/plugins and click Add custom MCP server.
Enter a name, for example American Cloud, and the server address. The /mcp path is required:
```
https://mcp.americancloud.com/mcp
```
Set Authentication to OAuth. ChatGPT discovers the sign-in settings from the server.
Open Advanced OAuth settings and check that the registration method is Client Identifier Metadata Document (CIMD). Leave the callback URL, the metadata URL, the default scope mcp and the OpenID setting as ChatGPT fills them in.
Tick I understand and want to continue, then click Create.
Click Connect. Your browser opens the American Cloud sign-in page. Sign in, then click Connect on the consent page.
You receive an email that confirms the connection. If you did not connect ChatGPT, open Connected apps and revoke it.

ChatGPT discovers the tools the server exposes and uses them when a question relates to your American Cloud account.

ChatGPT starts with full access. ChatGPT is a known app, so the connection begins with Full access as you, within your own American Cloud role: it can list, create, change and delete the resources of each service. To limit it, open Connected apps and choose Read-only or Custom. The change applies to ChatGPT's next request; you do not need to reconnect.

Verify

Start a new chat, choose the American Cloud server under Developer mode in the plus menu, and ask:

"What regions can I deploy to on American Cloud?"

If ChatGPT lists regions, you are connected.

Permissions

The app starts with Full access as you, within your own American Cloud role (see the note above). ChatGPT has its own permission setting on the server's page under Permission, which decides when it asks you before a tool runs; the default, Allow low-risk, runs read tools without a prompt and asks before a write.

Tools that delete or reinstall a resource are marked destructive. To limit the app to read-only, or to revoke it, open Connected apps. A permission change applies to the next request. The overview explains the permission model.

Giving ChatGPT a long autonomous task? Set the app to Read-only first, review the plan, then switch to Full access for the build.

ChatGPT manages your account, not the inside of a VM. ChatGPT has no shell, so it cannot run commands on a server. It can create a VM that configures itself with a cloud-init script, or open a browser console for you. For SSH work in the same session, use Codex. See Inside a VM.

Troubleshooting

"OAuth failed: invalid_scope". The server address lacks the /mcp path, or the registration method is not CIMD. Open the server's settings and check both.
The server shows an error or asks you to sign in again. Click Connect on the server's page and sign in again. This happens after a revoke, or when a sign-in expires.
A tool answers that the app lacks a permission. Choose the permission on Connected apps and ask again. Every tool is visible from the start, and a permission change applies to the next request.
ChatGPT does not list a tool from a newer server release. Click Refresh tools on the server's page. A permission change does not need this.
"This app was disconnected in Connected apps." Someone revoked the app. Wait a few minutes, then connect again.

Next steps

Things to try — prompt ideas from quick audits to full provisioning
Overview — the permission model and safety details