What is ChatGPT Developer mode?

Developer mode is a ChatGPT setting that gives it full Model Context Protocol client support — both read and write tools — so it can connect to remote MCP servers and take real actions in external systems. It is aimed at developers who understand how to configure and test those connections safely.

How do I enable Developer mode in ChatGPT?

On the web, open Settings → Security and login and turn on Developer mode. Once enabled, the apps and connectors page lets you create developer-mode apps from remote MCP server URLs.

Which plans include ChatGPT Developer mode?

OpenAI's documentation lists Pro, Plus, Business, Enterprise and Education accounts, on the web. It is not available in the mobile apps, and in managed workspaces an administrator can disable it.

Is ChatGPT Developer mode safe?

OpenAI explicitly labels it elevated risk. The three named dangers are prompt injection from untrusted content, the model making mistakes on write actions that destroy data, and malicious MCP servers attempting to steal information. It is safe in proportion to how carefully you choose what to connect.

What is the difference between Developer mode and regular connectors?

Regular connectors are OpenAI-maintained integrations for popular services, with a curated and largely read-oriented surface. Developer mode lets you point ChatGPT at any remote MCP server you like, including your own, with write access. More power, more responsibility, and no OpenAI review in between.

Do I need to be a developer to use Developer mode?

To connect an existing MCP server, no — it is a settings task. The name reflects who the feature was designed for and the level of caution it expects, not a coding requirement.

A guide · ~6 min read

ChatGPT Developer mode, explained

Developer mode turns ChatGPT into a full Model Context Protocol client. It can connect to any remote MCP server you point it at and call both read and write tools. It is the most powerful setting in ChatGPT, and the one OpenAI attaches the loudest warning to.

What it unlocks

Any remote MCP server. Not a curated list. Any URL, including one you wrote this afternoon.
Write actions. Create, update, delete — not just read. This is the real jump.
Tool-level control. Each app has a details page where you can toggle individual tools on and off.
Visible payloads. You can expand any tool call and read the exact JSON going in and coming back. Genuinely useful for debugging.
SSE and streaming HTTP. Plus OAuth, no-auth, and mixed authentication.

How to enable it

Open ChatGPT on the web. There is no mobile equivalent.
Go to Settings → Security and login.
Turn on Developer mode.
The apps and connectors page will now offer developer-mode apps from the plus button.

Not seeing it? Check the plan — OpenAI lists Pro, Plus, Business, Enterprise and Education — and check whether you are in a managed workspace where an admin has switched it off.

The risks, stated plainly

OpenAI names three, and none of them are theoretical:

Prompt injection. Content the model reads can contain text designed to look like instructions. A web page or a document can try to talk your assistant into doing something you did not ask for.
Model mistakes on writes. The model can call the right tool with the wrong arguments. On a delete operation that is not recoverable.
Malicious MCP servers. A server you connect can attempt to extract information from the conversation. There is no review process standing between you and an arbitrary URL.

Practical posture: connect servers you can identify the operator of, prefer read-only tokens where a server offers them, leave write confirmation on, and actually read the payload before approving.

Short answer

Developer mode is a toggle in Settings → Security and login that lets ChatGPT connect to any MCP server and take real actions. Worth enabling if you have something specific to connect. Not worth leaving on with servers you cannot vouch for.

Frequently Asked Questions

Now you have Developer mode. Connect something worth connecting.

Konshus is a memory vault you own — read-only tokens available, one URL to paste, and it answers Claude too.

Meet Konshus