
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
chatgpt-mcp
Advanced tools
An MCP (Model Context Protocol) server providing a tool to interact with the ChatGPT macOS desktop application.
An MCP (Model Context Protocol) server providing a tool to interact with the ChatGPT macOS desktop application.
This server exposes a single tool, chatgpt
, designed to allow MCP clients (e.g., Cline, Claude Desktop, Cursor) to send prompts to and retrieve conversation lists from the native ChatGPT application on macOS.
AI models interacting via MCP often need to leverage the capabilities or context within specific desktop applications like ChatGPT. Directly controlling the application allows the AI to continue existing conversations, ask new questions within the user's established ChatGPT environment, or query the conversation history without manual copy-pasting or context switching by the user.
chatgpt
ToolThis server provides the chatgpt
tool with the following operations:
Operation: ask
prompt
(string, required): The text prompt to send.conversation_id
(string, optional): The title/ID of an existing conversation to continue. If omitted, uses the currently active chat.time_to_wait
(number, optional, default: 6): The time in seconds (0-3600) to wait after sending the prompt before attempting to retrieve the response text from the ChatGPT window.
time_to_wait > 0
: The tool waits for the specified duration and then returns the text content found in the main response area of the ChatGPT window.time_to_wait == 0
: The tool sends the prompt and immediately returns a confirmation message ("Prompt sent. Response retrieval skipped (time_to_wait was 0).") without waiting or attempting to read the response.Operation: get_conversations
Requirements:
npx
) installed.Add the following JSON block within the "mcpServers": {}
object in your client's configuration file. Choose the file corresponding to your client and operating system:
Configuration Block:
"chatgpt-mac": {
"command": "npx",
"args": ["chatgpt-mcp"],
"env": {},
"disabled": false,
"autoApprove": []
}
(Note: If the package name chatgpt-mcp
is unavailable on npm, you might need to use a scoped name like @your-npm-username/chatgpt-mcp
in the future. The configuration would then change to "args": ["@your-npm-username/chatgpt-mcp"]
)
Client Configuration File Locations:
~/Library/Application Support/Claude/claude_desktop_config.json
%APPDATA%\Claude\claude_desktop_config.json
~/.config/Claude/claude_desktop_config.json
(Path may vary slightly)~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
%APPDATA%\Code\User\globalStorage\saoudrizwan.claude-dev\settings\cline_mcp_settings.json
~/.config/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
~/.cursor/mcp.json
.cursor/mcp.json
within your project folder.~/.codeium/windsurf/mcp_config.json
After adding the configuration block and saving the file, fully restart your MCP client application for the changes to take effect. The first time the client starts the server, npx
will automatically download the chatgpt-mcp
package from npm (once it's published) if it's not already cached.
Once installed and enabled, you can instruct your MCP client:
"Ask ChatGPT 'Explain quantum entanglement simply' and wait 15 seconds for the response."
The client's AI model should recognize the intent and call the chatgpt
tool with operation: "ask"
, the prompt
, and time_to_wait: 15
.
Or to get conversations:
"Get my ChatGPT conversation list."
This tool was adapted and modified by 199-bio based on the original work by Syed Azhar.
Further development inspired by initiatives at 199 Longevity, a group focused on extending the frontiers of human health and longevity. Learn more about our work in biotechnology at 199.bio.
Project contributor: Boris Djordjevic
This project is licensed under the MIT License - see the LICENSE file for details.
[1.0.7] - 2025-03-29
index.ts
with package.json
. (Skipped intermediate versions).FAQs
An MCP (Model Context Protocol) server providing a tool to interact with the ChatGPT macOS desktop application.
The npm package chatgpt-mcp receives a total of 7 weekly downloads. As such, chatgpt-mcp popularity was classified as not popular.
We found that chatgpt-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.