ChatGPT silently passes data between connectors and the bounty wants an ID card
With two connectors enabled, ChatGPT made a follow-up tool call through a different connector than the one that started the flow without notifying the user.
Key points
- •Two connectors (A in developer mode and B from the app directory) pointing to the same MCP server were enabled
- •ChatGPT made a follow-up tool call through a different connector than the one that started the flow
- •The user was not told about the switch, and the call carried a one-time confirmation code