AI · Oct 14, 2026
White Circle says newer OpenAI and Google image models are easier to jailbreak than their predecessorsChatGPT plug-ins grow into sidebar apps with interactive panels and event-triggered automations
· Updated · Signal Desk newsroom
Analysis of reporting by TechCrunch. How we work

OpenAI is letting developers build app-like experiences inside ChatGPT through plug-in extensions, including a sidebar home, interactive panels and file viewers. New tools include a Plugin Creator, better discovery, per-plugin access approvals, ChatGPT Sites hosting and MCP Events support for automations.
Key takeaways
- Plug-in extensions get a sidebar home, interactive panels and file viewers.
- Existing plug-ins already connect to Slack, SharePoint, Airtable and Drive.
- A Plugin Creator and redesigned directory submission are launching.
- Per-plugin access approvals and improved ranking arrive.
- MCP Events would let plug-ins start automations from connected-app events.
What changed
TechCrunch's Sarah Perez reports that OpenAI is letting developers build app-like experiences inside ChatGPT through plug-in extensions. These include a dedicated sidebar home, interactive panels that appear while chatting and file viewers for product-specific formats. Existing plug-ins already connect ChatGPT to services like Slack, SharePoint, Airtable and Google Drive; the new layer targets any app that works better inside the chat interface.
OpenAI is also introducing a Plugin Creator, a redesigned process for submitting to the plug-in directory, improved ranking and recommendations and per-plugin access approvals. ChatGPT Sites can host plug-ins for colleagues, with each user's own data permissions applied.
Automations
Support for MCP Events would let plug-ins start automations when something happens in a connected app, such as a new file or message. That moves plug-ins from tools a user invokes to workflows that run in the background, overlapping with automation platforms and with OpenAI's Dots agents.
Event-triggered automations raise permission questions. Per-plugin approvals and inherited data permissions are meant to keep access scoped, which matters given recent security reporting such as a flaw in ChatGPT's Mac app.
The bigger picture
The plug-in expansion is one piece of a broader strategy that TechCrunch described as taking direct aim at the app store model. With apps running inside chat, ChatGPT becomes a place where users discover and use software, not just ask questions. OpenAI also launched features resembling an office suite inside ChatGPT, adding competitive pressure on Microsoft.
For developers, the opportunity is reaching ChatGPT's large user base without building a separate front end. The risks include dependence on OpenAI's ranking and approval decisions. Developer uptake, how recommendations are ranked and how MCP Events automations are secured will show whether the plug-in platform matures. A roundup of announcements is in OpenAI DevDay 2026: the biggest news. More in our tools coverage and enterprise coverage.
Who feels it
- Developers
- A route to ChatGPT users, with dependence on OpenAI's ranking.
- Workplace IT
- Event-triggered automations need permission review.
- Microsoft and SaaS vendors
- ChatGPT becomes a competing surface for apps.
What to watch
- Developer adoption of plug-in extensions.
- How recommendations and ranking work.
- Security of MCP Events automations.
FAQ
What are plug-in extensions?
App-like experiences inside ChatGPT with sidebars, panels and file viewers.
What is MCP Events?
Support for plug-ins to start automations from events in connected apps.
Who can build them?
Developers, using tools including a new Plugin Creator.
How is access controlled?
Through per-plugin approvals and each user's data permissions.
Companies: OpenAI
More on OpenAI
AI · Oct 19, 2026
Microsoft ships Guardian Agents, saying frontier models ‘can’t be trusted’AI · Oct 13, 2026
After months off the frontier, Google ships Gemini 4 Argon with benchmark claims and aggressive pricingAI · Sep 22, 2026
Opus 5.5 hands risky cyber prompts to an older Claude model, and that routing is the real launch storyAI · Sep 30, 2026
The four rules in the White House AI commitment, and the missing fifth: penalties