---
title: "Openai Apps Challenge"
method: GET
path: "/.well-known/openai-apps-challenge"
tags: ["oauth-mcp"]
---

# Openai Apps Challenge

`GET /.well-known/openai-apps-challenge`

## Request

- Base URL: `https://api.meetadmiral.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.meetadmiral.com/.well-known/openai-apps-challenge`
- Auth: none declared

Prove to OpenAI's plugin portal that we own this host.

The portal issues a token and then fetches it back from here before it
will accept an MCP server URL. It is a public one-line string with no
secret in it — the point is only that whoever controls this domain could
put it here.

404 while unset, which is the honest answer before a token exists: an
empty 200 would look like a host that verified and returned nothing.

## Response `200`

Successful Response

---

[API](https://skmtc.dev/meetadmiral/apis/admiral-api.md) · [All operations](https://skmtc.dev/meetadmiral/apis/admiral-api/llms.txt) · [OpenAPI document](https://skmtc.dev/meetadmiral/apis/admiral-api/revisions/3cf1ee58ce50?raw)