Last updated September 2026

Connect ChatGPT to Your Bookmark Library

ChatGPT supports remote MCP apps through developer mode on eligible plans. Add the Save This One endpoint, approve OAuth, and use the bookmark tools your plan exposes. Availability and write access vary by plan.

ChatGPT's developer mode can attach a remote MCP app and use Save This One's read and write tools. This is different from OpenAI's built-in connectors and from using an MCP server through the Responses API.

Check eligibility first

OpenAI's current first-party pages are not fully aligned:

  • The developer-mode guide lists Plus, Pro, Business, Enterprise, and Education accounts on ChatGPT web.
  • The Help Center describes full MCP and write actions as a beta rolling out to Business, Enterprise, and Edu, with workspace admin controls.

Treat the UI in your account as authoritative. If Developer mode or the create-app button is absent, the feature may not be enabled for your account, role, workspace, or region. A normal built-in connector with search-only behavior is not equivalent to this custom MCP app.

Personal Plus or Pro, when enabled

  1. On ChatGPT web, open Settings → Security and login.
  2. Turn on Developer mode.
  3. Open the Apps/Plugins page, select +, and create a developer-mode app.
  4. Name it Save This One, choose OAuth authentication when asked, and enter:

``text https://mcp.savethisone.com/mcp ``

  1. Do not enter a password, API token, or custom authorization header. Complete the Save This One browser OAuth flow.
  2. Open the app's details page and confirm its tools were discovered. In a conversation, choose Developer mode from the composer + menu and select Save This One.

ChatGPT supports remote Streamable HTTP; it cannot connect directly to a local stdio process. Save This One is already public, so no tunnel is needed.

Business, Enterprise, and Edu

Workspace policy controls availability. An admin/owner first enables app creation under Workspace settings → Permissions & Roles → Connected Data (the label may include Developer mode / Create custom MCP connectors). Depending on role and plan, an admin or authorized developer creates and tests the app, then an admin publishes it to the workspace. Members connect their own Save This One accounts from Settings → Apps.

Publishing a server definition does not grant colleagues access to the publisher's bookmarks. OAuth still scopes each connection to the member who signs in.

Verify before enabling writes

On the app details page, refresh tools if needed. Save This One exposes these exact tools:

CategoryTools
Identity/readwhoami, list_bookmarks, search_bookmarks, get_bookmark, list_tags, list_comments
Non-destructive writessave_bookmark, archive_bookmark, create_tag, tag_bookmarks, add_comment
Destructivedelete_bookmark, delete_tag, delete_comment

Disable all write tools initially if ChatGPT gives you per-tool toggles. Then prompt:

Use the Save This One app. First call whoami. Then call list_tags and search_bookmarks for OAuth, limit 5. Do not call any tool that changes data.

Expand the tool call caret and inspect the full JSON input/output. OpenAI respects the server's readOnlyHint; tools without that annotation are treated as writes and normally require confirmation.

Useful ChatGPT workflows

Synthesize saved research

Search my active Save This One bookmarks for vector database, up to 10 results. Compare only what the returned title and description support, link every URL, and tell me where evidence is too thin. Do not alter the library.

The search is metadata keyword matching, not semantic or reader-body search. It does not include archived bookmarks.

Save links from a conversation

For each URL below, first search/list to avoid surprises. Show the URL and proposed tags. After one confirmation, call save_bookmark for each with tag chatgpt-research, and report whether each was new or already saved.

The save tool accepts url and optional tags; it does not accept a title. Metadata and reader extraction happen server-side, and duplicate URLs are not inserted again.

Review an archive proposal

List active bookmarks tagged old-stack, including IDs. Propose items to archive. Do not archive or delete until I approve specific IDs. Never use delete_bookmark for this task.

Attach an exact note

Find the bookmark for the OpenAI developer-mode guide. Show its ID and comments. Ask me to confirm before adding “Recheck plan availability before publishing.”

Least privilege in developer mode

Developer mode is intentionally powerful:

  • Keep only the tools needed for the current workflow enabled. A read-only research app needs the six identity/read tools only.
  • Review every write payload. Check IDs, URLs, tags, comment body, and the archived boolean.
  • Prefer reversible archive to delete. Permanent bookmark deletion also removes comments and tag links; deleting a tag detaches it everywhere.
  • add_comment is non-idempotent. After a timeout, call list_comments before retrying.
  • Do not turn off write confirmations for convenience. A model can misunderstand ambiguous instructions or act on prompt injection in external content.
  • Avoid sending secrets in prompts or comments. OAuth happens in the browser; ChatGPT does not need your Save This One password.
  • Agent mode does not necessarily use custom apps, and Deep Research may be limited to read/fetch actions. Use an ordinary developer-mode conversation when testing writes.

Troubleshooting

Developer mode is missing. Verify you are on ChatGPT web and in the intended personal/work workspace. On managed plans, ask an admin about Connected Data permissions. Because rollout documentation differs, do not assume a subscription alone guarantees access.

The app appears but only search/fetch is available. You may be using a built-in/legacy connector path or a surface that restricts writes. Reopen the developer-mode app details. If the custom tools cannot be enabled, use it read-only; do not claim that writes are supported for that account.

OAuth fails. Confirm the URL ends in /mcp, authentication is OAuth, and pop-ups/redirects are allowed. Remove and recreate the draft if its authentication choice is wrong.

Tools changed or are missing. In app details, use Refresh to fetch the latest tool definitions, then select the app again from the composer. Workspace-published apps may require an admin to refresh and republish changes.

whoami is wrong or calls are Unauthorized. Disconnect the app, sign in with the intended Save This One account, and reconnect. Never paste an access token into chat.

A write call is repeatedly proposed. Disable that tool in app settings, explicitly allow only named read tools in the prompt, and start a fresh conversation.

Official references

Start saving free

Keep reading