Add it as a connector.
ChatGPT takes a remote MCP server by URL in developer mode. Point it at the OAuth entry and sign in — there is no key to paste and nothing to keep in a config file.
Turn developer mode on in ChatGPT's settings, add a custom connector, and give it that URL. The exact menu path has moved more than once, so look for developer mode or custom connectors rather than following a screenshot. Available on Plus and Pro; on Business, Enterprise and Edu a workspace admin can switch developer mode off or allowlist specific connectors, so check with them first if you do not see it.
Use /mcp/connect, not the bare host. https://context.tileward.com authenticates with a
static API key, which the connector dialog has nowhere to put. The /mcp/connect entry runs a normal OAuth
sign-in instead. If you paste the wrong one you get a 401 whose body tells you this.
Not available in ChatGPT, and not on the roadmap.
This is a property of chat clients rather than a feature we have not built yet, so it is worth being plain about.
Governance works by standing in front of the model: something inspects the prompt, and refuses it before a token is generated. That requires the client to run a third party's gate before it sends your message, and to honour a refusal. Coding agents like Claude Code and Codex expose exactly that seam. ChatGPT does not, and no connector, custom GPT or system prompt substitutes for it — a connector exposes tools the model may choose to call, which is a conscience rather than a control.
If you need governed inference from a chat surface today, the route is the API rather than ChatGPT: the guard runs on our side of the request, so anything calling Tileward gets the same decision and the same audit record.
What the connector can see.
Every tool becomes available
A custom connector exposes everything the server offers, reads and writes alike, subject to your confirmation settings. Tileward Context includes tools that delete stored conversations and one that purges an account and is not undoable. Review the confirmation settings rather than approving by reflex.
What we receive
The turns you ask it to remember, and your recall queries. Storage is per account, never pooled with another tenant, and never used to train anything.