[aterga]

Summary

Both directory-submission guides carried statements that were true when written and have since expired, and one of them still framed a solved problem as a blocker.

OpenAI guide — domain verification (blocker 1) is resolved. The guide said the gateway front on mcp.internetcomputer.org answers /.well-known/openai-apps-challenge with a redirect, so the app's route never sees the portal's check. That is still true — and irrelevant: OpenAI's submission docs accept the challenge on "the MCP host name or a parent host name; paths are ignored", and the parent origin already serves the token. dfinity/internetcomputer-org#99 (2026-09-03) commits it at public/.well-known/openai-apps-challenge; https://internetcomputer.org/.well-known/openai-apps-challenge returns exactly the token as text/plain (re-verified 2026-09-22). Section 1 now records that, tells the submitter to choose internetcomputer.org as the challenge base in the portal, and keeps the app's own route plus the OPENAI_APPS_CHALLENGE_TOKEN secret as the fallback for a portal that insists on the server host. The header callout and the submission-day checklist say the same: the gateway-forwarding item is done, the secret item is conditional.

Both guides — expired caveats. "the old mcp.internetcomputer.org URL redirects there from the release that ships #165" (#165 merged 2026-08-28, and the gateway front redirects those paths regardless) and "dfinity/internetcomputer-org#77 refreshes its text to the current draft" (#77 merged 2026-08-28) read as pending work. They now state the redirect as a fact and #77 as done.

Anthropic guide — setup URL. The reviewer-access section and the test-credentials draft still sent reviewers to https://mcp.internetcomputer.org for setup instructions. That origin redirects to the landing page, so the guide now names the page itself, https://internetcomputer.org/icp-mcp/.

OpenAI guide — support row. Named "the status dashboard" among what the support page routes users to; the support page now links the public status page (status.internetcomputer.org), so the row says that.

Related issues

Follows #194 (status surface → Statuspage) and #195 (staging deploy fix). Companion to dfinity/internetcomputer-org#99 (parent-origin verification token) and #131 (status redirect).

Changes

• docs/openai-directory-submission.md: header callout, compliance rows (privacy/support), section 1 (heading, resolution, fallback), submission-day checklist items for blocker 1 and the privacy policy.
• docs/anthropic-directory-submission.md: documentation row, privacy-policy publication paragraph, reviewer-access section, Documentation/Privacy URL parentheticals, test-credentials draft, submission-day checklist.

Testing

• Docs only — no code, workflow, or deploy file changed
• Live: https://internetcomputer.org/.well-known/openai-apps-challenge → 200 text/plain, body is the single token (2026-09-22); OpenAI's parent-host rule quoted from developers.openai.com/apps-sdk/deploy/submission as fetched the same day
• Live: mcp.internetcomputer.org/{,privacy-policy,terms,support} 308 to their internetcomputer.org/icp-mcp/… homes (2026-09-22)
• No "ships Drop the landing site in favour of internetcomputer.org/icp-mcp; the old page paths redirect permanently #165" / "Stage 1: extract imcp2-core (transport/OAuth-agnostic components) #77 refreshes" phrasing left in either guide; remaining "cut off by the gateway front" mentions refer to /version only, which is still accurate
• .github/scripts/scan-internal-identifiers.sh origin/main...HEAD — clean
• cargo build / cargo test / cargo fmt / cargo clippy — n/a
• npm test --prefix monitoring/mcp-status — n/a

Checklist

• I have read the Contributing guidelines.
• Docs (README / comments) updated for any user-visible change.
• No secrets, credentials, or internal-only information are included (the verification token's value appears nowhere in this PR — only its URL).

🤖 Generated with Claude Code

https://claude.ai/code/session_01TGhwpdTbUqQbR5AiiN8Ljw

---

Generated by Claude Code

[Copilot]

Copilot review overview

🟢 Approval recommended

The documentation changes are consistent with the verified routing and deployment behavior.

Review effort: Balanced
Findings: None

What changed in this PR

Updates directory-submission guidance to reflect current redirects, parent-host domain verification, and canonical public URLs.

Changes:

• Documents OpenAI verification via internetcomputer.org.
• Removes stale redirect caveats.
• Corrects Anthropic reviewer setup and public support/status references.

File	Description
docs/​openai-directory-submission.md	Updates verification, support, privacy, and checklist guidance.
docs/​anthropic-directory-submission.md	Updates canonical documentation, privacy, and reviewer setup URLs.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.