[oAuth and GPT Actions] - 5 things I have learned (oAuth only)

Using oAuth is a means to an end.

The end goal is so that when people use my GPT-Alice, they can use it to interact with their data on my Alice service.

E.g. Bob can interact with GPT-Alice to get GPT-Alice to pull Bob’s data from the Alice-service or update Bob’s data on the Alice service. And Carol can do the same etc.

Another example but this time using a famous name like Dropbox to illustrate the same point.

Imagine Dropbox for example coming up with their own GPT.

So Dropbox users can interact with Dropbox GPT to pull their personal Dropbox data or update their personal Dropbox data.

Abstractly, custom GPT is like another client for the service. Like a mobile phone app interacting with the backend service. Which is why GPT store (like apple’s App Store).

Like

  • User (like Bob) <==> ALice-GPT <==> Alice-service (but only access Bob’s Alice-data using oAuth to identify)
  • User (like Bob) <==> ALice-mobileapp <==> Alice-service (but only access Bob’s Alice-data using oAuth to identify)
  • User (like Carol) <==> Dropbox-GPT <==> Dropbox-service (but only access Carol’s Dropbox data using oAuth to identify)
  • User (like Carol) <==> Dropbox-mobileapp <==> Dropbox-service (but only access Carol’s Alice-data using oAuth to identify)

I try to put myself in your shoes.

If I’m adopting your setup, that is, my GPT-Alice also would interact with other people who run their own services with their own servers,

that would also mean my Alice-service should also be able to interact with other people and their services.

What I would do is, I would write code on the service backend to interact with these other services rather than directly with the GPT.

  • User (like Bob) <==> Alice-GPT <==> Alice-service <==> Bob-service

If you can give more details about what you’re trying to do, it will be more useful for the rest of us who are trying to help.

Because I actually cannot imagine a concrete usecase you’re talking about. I’m only thinking abstractly.

I find it easier to imagine Bob setting up their own custom Bob-GPT so that the Bob GPT can talk with the Bob-service and API.

If you describe your usecase in words and you do a /r/GPT/mobile app on your usecase and the whole usecase sounds weird, then maybe something is off.

If you describe your usecase in words and you do a /r/GPT/mobile app on your usecase and the whole usecase makes sense, then there’s still a chance something can work.

I’ve also updated the thread title to make clear this is oAuth only discussion thread. Maybe you will find more help if you write your own thread.