ChatGPT Plugin
Connect ChatGPT to Lumail with OAuth—no API token to copy or store.
Connect Lumail as a custom plugin in ChatGPT. The connection uses OAuth, so you sign in with your existing Lumail account, choose an organization, and approve access without creating an API token.
Administrator access required: You must be an owner or admin of the Lumail organization you connect. Removing that role immediately prevents the plugin from accessing the organization.
Using the Codex CLI or the Codex app instead? Paste Read lumail.io/codex/install and set up the Lumail connection for me. into Codex and it configures itself — see the Codex guide.
Add the Plugin
ChatGPT's plugin settings are a UI flow, so this one is done by hand.
- Open ChatGPT Settings → Security and login and enable Developer mode.
- Open Plugins from the ChatGPT sidebar, then click Create app.
- Enter the following values:
| Setting | Value |
|---|---|
| Name | Lumail |
| Description | Draft campaigns, manage subscribers, and analyze Lumail with ChatGPT |
| Connection | Server URL |
| Server URL | https://lumail.io/mcp |
| Authentication | OAuth |
- Review and accept the custom MCP server warning, then click Create.
- Sign in to Lumail, select the organization to connect, and approve the requested access.
Lumail publishes the OAuth discovery metadata automatically. You do not need a client ID, client secret, or manually configured authorization URL.
What the Plugin Can Do
The plugin receives two Lumail scopes:
| Scope | Access |
|---|---|
lumail.read | Read subscribers, tags, campaigns, analytics, Workflow drafts, senders, fields, and style |
lumail.write | Add subscribers and tags, create or edit campaign and Workflow drafts, and enroll subscribers in a workflow |
Examples:
Show me the performance of my last five campaigns.Create a draft campaign for our product launch, but do not send it.Add [email protected] with the tag "early-access".Build a Workflow welcome sequence and leave it as a draft.For safety, the OAuth plugin does not expose tools that send or schedule campaigns, publish workflows, delete records, unsubscribe contacts, or change organization settings. Those operations remain available only through Lumail's API-token MCP endpoint where supported.
Security and Revocation
- Access tokens are scoped to the organization selected during authorization.
- Only owners and admins can connect an organization.
- Lumail checks the user's current organization membership on every MCP request.
- Disconnect the plugin from ChatGPT to remove the connection. Removing the user's owner/admin role blocks access immediately.
Troubleshooting
OAuth settings are not discovered: Confirm that the server URL is exactly https://lumail.io/mcp, without /api or /sse.
No organization is available: Ask an organization owner to promote your Lumail membership to owner or admin.
The connection stopped working: Your Lumail session can be refreshed automatically, but a removed membership or downgraded role requires an owner to restore access.
A tool is missing: The OAuth plugin exposes the safe plugin catalog described above. Use the API-token MCP server for integrations that require the wider tool catalog.