---
title: "Openai Apps Challenge"
method: GET
path: "/.well-known/openai-apps-challenge"
tags: ["mcp"]
---

# Openai Apps Challenge

`GET /.well-known/openai-apps-challenge`

## Request

- Base URL: `https://api.alert.camp` (the document declares no server; this is the origin it was published from)
- URL: `https://api.alert.camp/.well-known/openai-apps-challenge`
- Auth: none declared

Prove we control this host, for the ChatGPT app directory.

The token is served verbatim as plain text — OpenAI compares bytes, so
a JSON wrapper or a trailing newline is a failed verification with no
useful error.

Unset answers **404**, not an empty 200.  A blank body that matches
nothing reads as "verification failed, cause unknown"; a 404 says
plainly that no challenge is configured on this deploy.

Never cached: a stale token outlives the submission it belonged to,
and re-verification would then compare against a value we have since
rotated.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/alert/apis/alertcamp.md) · [All operations](https://skmtc.dev/alert/apis/alertcamp/llms.txt) · [OpenAPI document](https://skmtc.dev/alert/apis/alertcamp/revisions/864c8c9ef833?raw)