ChatGPT 的操作框架:新应用集成的实际工作原理

📄 中文摘要

OpenAI 于 2026 年 3 月 14 日推出了六个 ChatGPT 的原生应用集成,包括 DoorDash、Spotify、Uber、Canva、Figma 和 Expedia。虽然大家普遍关注这些应用的功能,但其背后的架构设计对开发者更为重要。OpenAI 构建了一个结构化的操作框架,为第三方应用提供了一种标准化的方式,以便在 ChatGPT 中公开操作,同时确保适当的身份验证和用户同意流程。关键设计决策包括使用范围限定的 OAuth 令牌,而非广泛的权限,确保敏感数据的安全性。通过这种方式,各个集成能够有效地管理用户的隐私和数据安全。

📄 English Summary

ChatGPT's Operator Framework: How the New App Integrations Actually Work

OpenAI launched six native app integrations for ChatGPT on March 14, 2026, including DoorDash, Spotify, Uber, Canva, Figma, and Expedia. While the focus has been on what these apps do, the underlying architecture is crucial for developers. OpenAI has built a structured operator framework that provides a standardized way for third-party apps to expose actions to ChatGPT, ensuring proper authentication and user consent flows. Key design decisions include the use of scoped OAuth tokens rather than broad permissions, which allows integrations like Uber to access booking permissions without accessing ride history, and DoorDash to gain ordering permissions without direct payment method access. This framework effectively manages user privacy and data security.

Powered by Cloudflare Workers + Payload CMS + Claude 3.5

数据源: OpenAI, Google AI, DeepMind, AWS ML Blog, HuggingFace 等