Notely Voice package validation — 2026-10-14

Result: CONFIGURATION PREPARED; PRODUCTION READINESS NOT CONFIRMED.
Version: 1.0.1

Applied the exact supplied name, display name, descriptions, developer, support email, category, website, privacy and terms URLs. Preserved all four supplied PNGs. Updated the portable MCP transport to streamable-http; retained http in the Codex compatibility file. Removed unsupported skills/mcpServers root fields from the portable manifest.

OAuth is configured as oauth with client.mode=dcr, email scope, and the supplied authorization/token/registration URLs. No credentials are packaged. Discovery and OpenAPI URLs are recorded as supporting configuration; they are not invented manifest fields. PKCE is enforced by the OAuth host/server flow, not by a package flag. POST (Basic or Bearer) is retained as the owner's requested specification, but not declared as an unsupported tokenEndpointAuthMethod. With DCR, token client authentication must match the server metadata and registration response; Bearer is not one of the documented client authentication enum values.

Three listing starter prompts are supported by this workflow; the first three are configured. All five supplied prompts are retained in SAMPLE-PROMPTS.txt and review test cases.

Static checks: root manifest passes every applicable assertion of the fetched published schema using a local validator. MCP base transport passes its published schema. The published MCP schema rejects extensions, while official OpenAI documentation explicitly supports extensions.com.openai.auth; that extension was checked separately. JSON, synchronized compatibility settings, relative asset references, skill frontmatter, and final ZIP integrity pass.

Assets: logo.png 1024x1024, 45408 bytes; logo-dark.png 1024x1024, 39767 bytes; icon.png 128x128, 6543 bytes; icon-dark.png 128x128, 6658 bytes. All square and valid PNG; composer icons below 10 KB.

Live checks: the MCP initialize request, OpenAPI URL, both discovery URLs, homepage, privacy and terms URLs returned HTTP 403 from this execution environment. The MCP response reports Cloudflare error 1010 (browser signature blocked, owner action required, retryable false). This is not proof that these endpoints are unavailable to ordinary users. Discovery content, advertised PKCE S256, scope, token authentication, and authenticated note tools could not be verified. No login or token exchange was attempted.

The supplied SERVER-SECURITY-REVIEW.md records unresolved downstream client binding, refresh token ownership, dedicated signing-secret, and secret-rotation checks. Those are historical findings, not a current server audit. Obtain evidence of their resolution and complete authenticated read-only tests before calling this production-ready.

Ready for private import and connection testing. Public approval, production security certification, and successful OAuth/tool operation are not established by packaging or account creation.

References:
https://developers.openai.com/plugins/build/plugins
https://developers.openai.com/plugins/build/auth
https://agent-plugins.org/schemas/1.0.0/plugin.schema.json
https://agent-plugins.org/schemas/1.0.0/mcp.schema.json
