Claude connectors, ChatGPT plugins and MCP: what they are, how to add one in Claude, ChatGPT and Gemini, the plan limits and a safety checklist

Disclosure: NOXI publishes this guide and is one of the tools it mentions; everything about MCP, connectors, plugins and apps applies to any assistant and any tool you connect.

The names differ by assistant, but the idea is the same: a connector is a key you hand an assistant. The rule this guide is built on: add only connectors from makers you trust, give each one the least access it needs, read every action before you approve it, and disconnect what you stop using. Every plan limit and menu path below comes from the vendors' own help pages, checked on 22 October 2026.

Key numbers

What is MCP? The Model Context Protocol in plain words

MCP (Model Context Protocol) is an open-source standard for connecting AI applications to external systems, so an assistant such as Claude or ChatGPT can reach data sources, tools and workflows through one common method instead of a custom integration for each pair [4]. Anthropic introduced it on 25 November 2024 [1].

The official site's analogy is the one to remember: "Think of MCP like a USB-C port for AI applications" [4]. A laptop does not need a different socket for every monitor and charger; an assistant does not need a different integration for every calendar and file store. The tool's maker builds one MCP server, and any assistant that speaks MCP can plug into it.

The specification describes three roles [3]:

• Host: the AI application you use, such as Claude Desktop, ChatGPT or Gemini.
• Client: the connector inside the host that keeps one connection to one server.
• Server: the service that offers context and capabilities, such as a file store, a CRM or a presentation tool.

A server can offer three kinds of things [3]: resources (context and data for you or the model), prompts (templated messages and workflows) and tools (functions the model can run, such as "create a task" or "search my files"). Messages travel in JSON-RPC 2.0, and the design takes inspiration from the Language Server Protocol, which did the same job for programming languages across code editors [3].

What MCP is not: an app store, a product you install or a security guarantee. Consent screens and permissions are the job of the assistant and the server, which is why the safety section below matters more than the setup steps [3].

What is an MCP server, explained simply?

An MCP server is a small program, run by a tool's maker or by you, that tells an assistant what it can do in that tool and carries out the requests. When you add "a custom connector" to Claude or "a custom app" to Gemini, what you paste is the web address of an MCP server [5][15].

A remote server lives at an HTTPS address and usually asks you to sign in; Claude's custom connectors, ChatGPT's custom MCP servers and Gemini's custom apps use these. A local server runs on your own computer; Claude Desktop installs these as desktop extensions [9], and the MCP security guidance warns they "may have direct access to the user's system" [20].

MCP in eight dates: from launch to the Linux Foundation

MCP went from an Anthropic release in November 2024 to support in Claude, ChatGPT, Gemini, Microsoft Copilot and Visual Studio Code within about a year, and in December 2025 it moved to a neutral foundation under the Linux Foundation [2].

One change still confuses searchers: in July 2025 Claude's directory announcement said remote connectors were for paid plans only [9], while the help centre now says web connectors are available to all users and Free users can add one custom connector [5][6].

MCP vs API, and MCP vs plugins: the difference in plain words

An API is one product's own door, with its own rules, that each app must learn separately; MCP is a shared standard, so a tool's maker builds one MCP server and every assistant that speaks MCP can use it. Many MCP servers simply sit in front of a product's existing API and translate.

Plugin, app, connector and add-in are product words; MCP is the protocol underneath many of them.

Add-ins live inside Office apps, while connectors live inside the assistant: an add-in brings AI to your open file, and a connector brings your other tools to the AI chat. For the first kind, see our ranking of AI add-ins for PowerPoint, and for Google's editor our guide to AI for Google Slides.

Claude connectors vs MCP: are they the same thing?

A Claude connector is how Claude uses MCP: custom connectors are, in Claude's own help-centre title, "custom connectors using remote MCP" [5]. MCP is the standard; the connector is the saved, signed-in connection inside your Claude account. Some directory connectors are remote MCP servers, and desktop extensions run local servers on your computer [9].

Add-ons in Claude, ChatGPT and Gemini: names, menus and who can add a custom MCP server

Claude, ChatGPT and Gemini all let you connect other tools, but they use different names, put them in different menus and set different rules for adding your own MCP server. The table is a guide, not a score; every cell comes from the vendor's help page opened on 22 October 2026, and Copilot, Perplexity and Mistral follow in their own table below.

Claude connectors: the directory, custom connectors and plan limits

Claude connectors let Claude "access your apps and services, retrieve your data, and take actions within connected services" [6]. You pick ready-made ones from the Connectors Directory or add any remote MCP server as a custom connector; both are managed under Customize > Connectors.

Four facts from Claude's help pages answer most questions [5][6]:

• Where they work: directory connectors work on Claude, Cowork, Claude Desktop and Claude Mobile; custom ones are added on the web or in Desktop [5][6].
• Free plan: custom remote MCP connectors are on Free, Pro, Max, Team and Enterprise, with Free limited to one [6].
• Organisations: on Team and Enterprise, an owner enables connectors first; each member then signs in [6].
• Permissions: Claude inherits your permissions from the connected service [6].

Claude connectors list: where the directory is

The Claude connectors list is the Connectors Directory inside Claude: click Customize in the left sidebar, choose the Connectors tab and open Discover [7]. From a chat, select the + button, hover over Connectors and choose Manage connectors [6]. Each connector has a page with its use cases, its read and write capabilities and where it is available [6].

At its July 2025 launch, Anthropic named partner connectors such as Notion, Canva and Stripe, and Figma, Socket and Prisma as desktop extensions [9]. The directory now lists skills, connectors and plugins together, and on Team and Enterprise it also shows items published to your organisation [7].

Claude custom connector on the free plan: one, then upgrade

A Claude Free user can add one custom connector [5]. If you need a second, for example a deck tool and a project tracker, the documented options are to remove the first or move to a paid plan. Claude's pricing page lists Pro at $20 a month on monthly billing, or $17 a month on annual billing, which is $200 billed up front; Max starts from $100 a month (prices exclude tax, checked 22 October 2026) [10].

How to add a custom connector in Claude (how to add MCP to Claude)

To add an MCP server to Claude, go to Customize > Connectors, click "+ Add", choose "Add custom connector", enter a name and the server's remote MCP URL, review the sign-in settings Claude detects, and click "Add" [5]. The steps below follow Claude's help centre as written on 22 October 2026.

On Free, Pro and Max (your own account)

1. Go to Customize > Connectors.
2. Click + Add, then Add custom connector.
3. Name the connector, enter the remote MCP server URL its maker gives you, and continue.
4. Review the authentication settings Claude detects and change them only if the maker's instructions say so.
5. Choose how people sign in: Sign in now, Sign in when needed or No sign in.
6. If you chose a sign-in option, pick the OAuth client option; Claude marks "Use Claude's published identity" as recommended.
7. Only if the maker asks for one, add a fixed credential such as an API key under Request headers.
8. Click Add, then sign in to the service when Claude asks.

Claude's help page describes these steps for Pro and Max and gives no separate list for Free, which uses the same Customize > Connectors page within its one-connector limit [5][6].

On Team and Enterprise

An owner goes to Organization settings > Connectors, clicks Add, hovers over Custom, selects Web, completes the same name, URL and sign-in steps and clicks Add. Members then open Customize > Connectors, find the connector (usually labelled "Custom") and click Connect [5]. Owners can set each permission to "Always allow, Needs approval, or Blocked", and members cannot override those limits [6].

How to add MCP to Claude Desktop and mobile

Add custom connectors on the web or in Desktop; they then work on mobile [25]. Remote connections originate from Anthropic's cloud, so the server must be reachable over the public internet; a server on your own laptop or office network will not work as a custom connector [5]. Local servers are a Claude Desktop feature, installed as desktop extensions from the directory [9].

ChatGPT plugins and apps: what they are and how to use them

In ChatGPT, an app connects ChatGPT to a service such as Slack or Google Drive, and a plugin brings apps and skills together for a task; you find both under Plugins in the sidebar, and "The plugin directory is available across ChatGPT plans" [11]. Whether you can install a given plugin depends on your plan, workspace, role, region and the plugin itself [11].

If you are looking for "ChatGPT connectors" or "ChatGPT apps", they are in the same place. OpenAI's connected-apps page tells you to open Settings > Plugins to connect an app, and notes that "Very old versions of the iOS or Android app may show Apps instead of Plugins" [13]. Its custom MCP page sends administrators to Admin console > Plugins > Manage Legacy Apps for older app settings [12].

How to use apps in ChatGPT

To use an app in ChatGPT, install the plugin that contains it, connect your account if asked, then mention it with @ in a message or choose it from the + menu [11][13]. OpenAI's steps:

1. Go to Plugins in the sidebar (web, desktop or mobile) and browse the directory [11].
2. Select a plugin and review its description, skills, apps and setup requirements; a "Desktop only" label means it needs the desktop app [11].
3. Select Install plugin; if prompted, select Connect and sign in to the provider account that has access to the information you want [11][13].
4. Review the requested services and permissions and complete the provider's authorisation [13].
5. In a chat, type @ and pick the plugin, or select + and enter its name. ChatGPT also uses installed plugins on its own when they are relevant [11].

An "OpenAI Verified" badge means OpenAI reviewed the plugin for quality, reliability and usefulness; it "does not replace your organization's privacy, security, or vendor review" [11].

How to add MCP to ChatGPT: custom MCP servers and developer mode

A custom MCP server can be added to ChatGPT by ChatGPT Business and Enterprise/Edu customers on ChatGPT web, from Plugins > + > Add custom MCP server; OpenAI's page says "You don't need to turn on Developer Mode first" [12]. On Business, only admins and owners can create and publish them; on Enterprise/Edu, admins can grant the permission to selected members [12].

OpenAI's steps, as written on 22 October 2026 [12]:

1. Go to Plugins.
2. Select the plus button, then Add custom MCP server.
3. Enter a name and, optionally, a description.
4. Under Connection, enter the server's public HTTPS MCP endpoint URL (or choose a Secure MCP Tunnel).
5. Configure authentication for the server.
6. Review the risk warning and select I understand and want to continue.
7. Select Create as a plugin and review the discovered tools and metadata.

The same page settles three common questions [12]: custom MCP servers are web-only; ChatGPT connects to remote servers, not directly to a local one; and "Pro users can connect custom MCP servers with read/fetch permissions", while full MCP is for Business and Enterprise/Edu. Tutorials that start with "turn on Developer mode" describe an older path.

Gemini Connected Apps and custom apps (MCP): US, 18+, personal accounts

Gemini connects to other apps through Connected Apps, such as summarising Gmail or creating calendar events, and it also accepts custom apps by MCP server URL if you are 18 or over, in the US, signed in with a personal Google Account and have Keep Activity on [15][16].

People still search for "Gemini extensions"; Google's help pages today say Connected Apps. With Keep Activity off, Connected Apps are unavailable on gemini.google.com, iOS and smart watches, and on Android only Device assistance, Phone, Messages and WhatsApp remain; type @ in the prompt box to pick an app for one request [16].

How to add a custom app (MCP server) to Gemini

Google's steps for a custom app, which you can only add in the Gemini web app [15]:

1. On a computer, go to gemini.google.com.
2. At the bottom, click Settings > Connected Apps. If you don't see it, click Personal Intelligence > Connected Apps first.
3. Under Custom apps, use the "Add a custom app link to get started" field, or click Add a custom app.
4. Enter the app's MCP server URL. If the server doesn't support Dynamic Client Registration, open Advanced features and enter your credentials.
5. Click Next and follow the on-screen instructions.

For now, custom apps are English-only and available only in the Gemini mobile app and the web app; once connected on the web, they work in both [15]. Google is direct about the risk: it "does not control, monitor, or secure third-party MCP servers", and custom apps "may request data beyond what is strictly needed for your request" [15].

Copilot, Perplexity and Mistral: connectors in one table

Microsoft Copilot's consumer app connects to a fixed list of services, while Perplexity and Mistral let you add your own remote MCP server as a custom connector, with admin controls for organisations. The table summarises each vendor's help page; plan names appear only where the page names them.

The best Claude connectors for everyday work, by job

The best Claude connectors remove a copy-and-paste step you do every week: files, email and calendar, notes, design and presentations. Start with one connector per job, from a tool you already use.

The table names only examples the vendors list on their own pages; the directory in your own account is the current list.

What are the best MCP servers for everyday users?

For everyday users, the best MCP servers are the official ones from the maker of a tool you already use, found in your assistant's own directory rather than a list of unknown servers. OWASP's advice applies to everyone: "Only install MCP servers from trusted, verified sources" [23].

Are MCP connectors safe? What a connector can read, and the checklist

MCP connectors are as safe as the server you connect and the permissions you grant: the protocol itself "cannot enforce these security principles", so trust in the maker, the least access and your approval of each action do the work [3]. Every vendor in this guide says the same thing in its own words: connect only servers you trust [5][12][15][18].

What a connector can read and do

A connector can read what your account in the other service can read, and do what you allow it to do there. Claude's help says connectors only sync content you have permission to view, and Microsoft says Copilot "only works with content your account already has permission to view" [6][17]. Two consequences follow:

• Your access is the ceiling, not the default. Connecting your work drive with full access gives the assistant everything you can open, including folders you forgot about. Where a sign-in screen offers narrower scopes, choose them; Claude's help says to "deny access if requested permissions seem unnecessary" [5].
• Data leaves the assistant. Claude notes that connected services process data on their own infrastructure under their own terms [6]; Google says that once data reaches a custom app, it is "subject to that app's privacy practices" [15]. Read the connector maker's privacy policy as you would any other vendor's; for what the assistant itself keeps, see whether ChatGPT, Claude and Gemini train on your chats.

The four risks, in plain words

• Tool poisoning: "Malicious instructions hidden in tool descriptions, parameter schemas, or return values that manipulate the LLM's behavior" (OWASP) [23]. This is why the specification says tool descriptions "should be considered untrusted, unless obtained from a trusted server" [3], and why Claude warns that "Malicious MCP servers may include hidden instructions" [5].
• Prompt injection from content: a document, email or web page the assistant reads contains instructions aimed at the assistant. Microsoft calls it cross-prompt injection: content that "can override agent instructions" [21]. OpenAI lists prompt injection as a risk of untrusted servers [12].
• Rug pulls: "A server changes its tool definitions after initial user approval" (OWASP) [23]. Claude's help tells you to monitor tool behaviour changes [5]; ChatGPT workspaces use a "frozen" snapshot of a server's tools until an admin publishes an update [12].
• Confused deputy: a flaw in a server that connects you to a third service, which can let an attacker obtain access codes without your consent [20]. The server maker fixes it; your defence is a trusted maker.

For security teams, OWASP keeps an MCP Top 10, currently a beta, with risks such as privilege escalation via scope creep and shadow MCP servers [22].

Connector safety checklist (pass/fail)

For the wider question of which documents belong in any AI tool, our template for confidential material in AI presentation tools walks through a classification and a sign-off step.

Troubleshooting: Claude connectors not working, ChatGPT apps not showing

When a connector is missing or fails, the cause is usually the plan, a workspace policy, the region or account type, an activity setting, or a server the assistant cannot reach.

If none apply, disconnect, reconnect and sign in again, then contact the server's maker.

Worked example: a three-person studio connects two tools to Claude

Example Studio Kanata is a fictional three-person design studio. It wants Claude to reach two tools through custom connectors: its presentation tool, NOXI, for client decks, and its project tracker, which publishes its own remote MCP server.

Step 1: the plan limit. Claude's Free plan allows one custom connector [5]. The studio needs two, and 2 > 1, so each of the three people needs a paid plan to keep both connectors.

Step 2: the cost. Claude Pro on annual billing is $200 a year per person, shown on the pricing page as $17 a month; on monthly billing it is $20 a month [10].

Annual billing saves $120 a year, 16.7% of the monthly total, before tax [10].

Step 3: sign-ins and keys. The deck tool's connect page states "1 sign-in per assistant" and "0 API keys or passwords to paste" [25]. For one assistant and three people that is 3 × 1 = 3 sign-ins and 0 keys. The tracker uses its own sign-in, so the studio counts 3 more: 6 sign-ins in total, and nothing secret pasted into a chat.

Step 4: access. The deck connector's consent screen lists reading presentations and creating, editing and exporting them [25]. For the tracker, the studio grants task access only and turns off its delete tool in Claude's "Search and tools" menu [5].

Step 5: upkeep. A connection to the deck tool "stays active for up to a year while you use it at least once a month" [25]. The weekly deck review uses it 52 times a year, above the 12 monthly uses needed, so each person signs in again at most once a year. They connect on 1 December 2026 and book a 90-day access review for 1 March 2027.

Here are two slides from this article's worked example, as NOXI built them, unedited.

3 prompts for building a deck from an assistant with NOXI connected

Once a deck tool is connected, name it in the request so the assistant picks the right connector, and give the slide count, the audience and the facts to use.

For more prompt patterns, see our 40 prompts for presentations.

Build it: connect NOXI to Claude and ask for a deck

NOXI publishes one MCP server address for every assistant on its connect page: https://mcp.noxi.ai/mcp. You sign in to NOXI in your browser, so there is no API key to copy [25]. The steps below are the Claude path, using Claude's help-centre wording for the menu; noxi.ai/connect also lists ChatGPT, Cursor, Claude Code and Codex as MCP clients.

The connection works only with presentations in the NOXI account you connected [25]. For decks made in the assistants themselves, see our comparisons of Claude for presentations and ChatGPT for presentations, and for polishing an existing file, our scored list of AI tools that make a PowerPoint look better.

Frequently asked questions

What is MCP in AI?

MCP, the Model Context Protocol, is an open-source standard for connecting AI applications to external systems such as files, databases, search tools and workflows. Anthropic introduced it in November 2024, and it now sits in the Agentic AI Foundation under the Linux Foundation. Its official site compares it to a USB-C port for AI applications.

What are Claude connectors?

Claude connectors let Claude access your apps and services, retrieve your data and take actions in them with your permission. You add ready-made ones from the Connectors Directory or any remote MCP server as a custom connector, both under Customize > Connectors, and they work on the web, Claude Desktop and the mobile apps.

Can I add connectors on Claude's free plan?

Yes. Claude's help centre says web connectors are available to all users, and custom remote MCP connectors are available on Free, Pro, Max, Team and Enterprise, with Free users limited to one custom connector. If you need a second custom connector, remove the first or move to a paid plan such as Pro.

How do I add a custom connector to Claude?

Go to Customize > Connectors, click + Add and choose Add custom connector. Enter a name and the remote MCP server URL, review the sign-in settings Claude detects, choose how people sign in, and click Add. On Team and Enterprise, an owner first adds it under Organization settings > Connectors, then members click Connect.

What happened to ChatGPT apps and connectors?

They now sit under Plugins. In OpenAI's help centre, an app connects ChatGPT to a service such as Google Drive or Slack, and a plugin bundles apps and skills for a task. You find them under Plugins in the sidebar, and very old versions of the mobile apps may still show Apps instead.

How do I add an MCP server to ChatGPT?

On ChatGPT Business or Enterprise/Edu, on the web, go to Plugins, select the plus button and choose Add custom MCP server. Enter a name and the server's HTTPS endpoint, configure authentication, accept the risk warning and select Create as a plugin. OpenAI says you don't need to turn on Developer Mode first.

Does Gemini support MCP?

Yes. Gemini accepts custom apps by MCP server URL, added at gemini.google.com under Settings > Connected Apps > Custom apps. You must be 18 or over, in the US, signed in with a personal Google Account and have Keep Activity on. For now, custom apps are English-only, in the Gemini web and mobile apps.

What is the difference between MCP and an API?

An API is one product's own interface, so every app must build a separate integration for it. MCP is a shared standard: a tool's maker builds one MCP server, and any assistant that speaks MCP, such as Claude, ChatGPT or Gemini, can use it. Many MCP servers sit in front of an existing API and translate requests.

Are MCP connectors safe?

They are as safe as the server you connect and the access you grant. The MCP specification says tool descriptions should be treated as untrusted unless they come from a trusted server, and every major assistant tells you to connect only servers you trust. Grant the least access, read every action before approving it, and disconnect unused connectors.

Can I make a presentation from inside Claude?

Yes. Connect a presentation tool that publishes an MCP server as a custom connector, then ask for a deck in the chat. For example, connect NOXI with the address on noxi.ai/connect, ask for a 10-slide deck, receive the PDF and PowerPoint files in the chat, and open the deck in NOXI to edit or present it.

Sources & methodology

How this guide was made: every plan limit, menu path and quotation comes from the vendor's own help centre, pricing page, blog, release notes or specification; OpenAI's help pages and noxi.ai/connect were read in a browser. The checklist and the table by job are editorial recommendations. Studio Kanata is fictional; every calculation was checked twice. All sources were checked on 22 October 2026.

• [1] MCP introduced as an open standard on 25 November 2024; specification and SDKs, local MCP server support in the Claude Desktop apps and an open-source repository of servers; pre-built servers for Google Drive, Slack, GitHub, Git, Postgres and Puppeteer — Anthropic, Introducing the Model Context Protocol (25 November 2024).
• [2] Donation to the Agentic AI Foundation, a directed fund under the Linux Foundation co-founded by Anthropic, Block and OpenAI; more than 10,000 active public MCP servers; 97M+ monthly SDK downloads across Python and TypeScript; adoption by ChatGPT, Cursor, Gemini, Microsoft Copilot and Visual Studio Code — Anthropic, Donating the Model Context Protocol and establishing the Agentic AI Foundation (9 December 2025).
• [3] Current revision 2026-07-28; hosts, clients and servers; resources, prompts and tools; JSON-RPC 2.0; inspiration from the Language Server Protocol; security principles, "descriptions of tool behavior such as annotations should be considered untrusted, unless obtained from a trusted server", and MCP "cannot enforce these security principles at the protocol level" — Model Context Protocol, Specification (latest).
• [4] Definition of MCP; "Think of MCP like a USB-C port for AI applications"; examples such as Google Calendar and Notion; support in Claude, ChatGPT, Visual Studio Code and Cursor — Model Context Protocol, What is the Model Context Protocol (MCP)?.
• [5] Custom connectors using remote MCP on Free, Pro, Max, Team and Enterprise; "Free users are limited to one custom connector"; steps under Customize > Connectors and Organization settings > Connectors; sign-in and OAuth client options; connectors work on claude.ai, Claude Desktop, Cowork and the mobile apps; connections originate from Anthropic's cloud; security guidance including "Malicious MCP servers may include hidden instructions" and the "Search and tools" menu — Claude Help Center, Get started with custom connectors using remote MCP.
• [6] What connectors do; the Connectors Directory and how to reach it; web connectors for all users on Claude, Cowork, Claude Desktop and Claude Mobile; Free users limited to one custom connector; owners enable connectors on Team and Enterprise; "Always allow, Needs approval, or Blocked"; content you have permission to view; services process data under their own terms — Claude Help Center, Use connectors to extend Claude's capabilities.
• [7] Unified directory of skills, connectors and plugins under Customize, Discover tab; organisation-published items on Team and Enterprise — Claude Help Center, Browse skills, connectors, and plugins in one directory.
• [8] Integrations in beta on Max, Team and Enterprise (1 May 2025); expanded to Pro, Max, Team and Enterprise (update, 3 June 2025) — Claude blog, Claude can now connect to your world (1 May 2025).
• [9] Directory of connectors opened 14 July 2025; remote connectors then for paid plans only; partner connectors Notion, Canva and Stripe; desktop extensions such as Figma, Socket and Prisma — Claude blog, Discover tools that work with Claude (14 July 2025).
• [10] Pro $20 a month on monthly billing, $17 a month on annual billing ($200 billed up front); Max from $100 a month; prices exclude applicable tax; connectors marked on every plan — Claude, Plans and pricing.
• [11] Plugins bundle skills, connected apps, app templates and extensions; "The plugin directory is available across ChatGPT plans"; Plugins in the sidebar; install and connect steps; @ mention; OpenAI Verified badge; Slack and Linear example — OpenAI Help Center, Plugins in ChatGPT.
• [12] Custom MCP server connections and full MCP support for Business and Enterprise/Edu on ChatGPT web; steps from Plugins; "You don't need to turn on Developer Mode first"; web only; remote servers only; Pro users with read/fetch permissions; frozen tool snapshot; prompt-injection warning — OpenAI Help Center, Connecting custom MCP servers in ChatGPT.
• [13] Apps connect ChatGPT to services such as Google Drive or Slack; Settings > Plugins; "Very old versions of the iOS or Android app may show Apps instead of Plugins"; app permissions; Disabled by admin; provider pages for Google Drive, SharePoint, Microsoft Teams and Outlook — OpenAI Help Center, Connected apps in ChatGPT.
• [14] Release v0.0.7, published 26 March 2025, key change "MCP support" — OpenAI Agents SDK for Python, release v0.0.7 (GitHub).
• [15] Custom apps by MCP server URL; 18 or over and in the US; personal Google Account; Keep Activity on; English only; steps under Settings > Connected Apps; Google "does not control, monitor, or secure third-party MCP servers"; custom apps "may request data beyond what is strictly needed" — Gemini Apps Help, Connect & manage custom apps for Gemini Apps.
• [16] Connected Apps examples (Gmail, calendar events, music, smart home, calls and messages); Customize > Connectors; Keep Activity requirement; @ to pick an app — Gemini Apps Help, Use & manage Connected Apps in Gemini.
• [17] Copilot connectors for OneDrive, Outlook.com, Google Drive, Gmail, Calendar and Contacts on Copilot.com and Copilot Mobile; account matching; content your account can already view — Microsoft Support, Connecting Microsoft Copilot to other services.
• [18] Custom remote connectors from Plugins or Enterprise settings; HTTPS required; "Perplexity cannot verify third-party MCP servers" — Perplexity Help Center, Adding Custom Remote Connectors.
• [19] Custom MCP connectors are administrator-only; the account owner is the administrator on Free, Pro and Student; read and write approval advice — Mistral AI Docs, MCP Connectors.
• [20] Confused deputy problem, token passthrough, local MCP server compromise ("may have direct access to the user's system") and scope minimization — Model Context Protocol, Security Best Practices (2026-07-28).
• [21] Windows 11 MCP preview and threat list including cross-prompt injection and tool poisoning (19 May 2025) — Windows Experience Blog, Securing the Model Context Protocol (19 May 2025).
• [22] The ten MCP risk categories, including MCP02 privilege escalation via scope creep, MCP09 shadow MCP servers and MCP10 context injection and over-sharing; project in beta — OWASP, MCP Top 10.
• [23] Definitions of tool poisoning and rug pull attacks; least privilege; human confirmation; "Only install MCP servers from trusted, verified sources" — OWASP Cheat Sheet Series, MCP Security Cheat Sheet.
• [24] Formation of the Agentic AI Foundation with founding contributions MCP, goose and AGENTS.md (9 December 2025) — Linux Foundation, Linux Foundation Announces the Formation of the Agentic AI Foundation (9 December 2025).
• [25] One server address for every assistant; sign-in in the browser with no API key; "1 sign-in per assistant" and "0 API keys or passwords to paste"; Claude setup steps; consent screen; files in the chat; access limited to the connected account; disconnect at any time; a connection stays active for up to a year while used at least once a month — NOXI, Connect NOXI to your AI assistant.

Connect NOXI to your assistant with the address on noxi.ai/connect, ask it for a deck, then open the deck in NOXI to edit it by chat, present it full-screen or download an editable PowerPoint or PDF.