Your account stays yours
Connect through Nextcloud Login Flow. The bridge never asks you to paste your Nextcloud password or app password.
v0.3 open-source release
Your cloud.
Your account.
Your workspace.
An open-source, tenant-isolated bridge that lets ChatGPT and Codex work with files in your own Nextcloud—without collecting your Nextcloud password.
Public hosted access opens after production OAuth validation and OpenAI review.
workspace boundary/ChatGPT
✓
No password pasteNextcloud Login Flow v2
⌾
Tenant isolatedEncrypted credentials
01 No Nextcloud password collection
02 Root-bound file access
03 Closed-world write tools
04 Open source, Apache-2.0
Designed around boundaries
Useful by design.
Cautious by default.
The bridge does not turn a chat into an all-access cloud admin. It exposes focused tools with explicit scopes, limits, and risk metadata.
A workspace, not your whole cloud
Every file path is restricted to a root you select. Parent traversal and account-root access are rejected before network access.
Identity stays separated
OAuth identifies the bridge user. Nextcloud credentials live in a separate encrypted store and are resolved only for that tenant.
Writes stay deliberate
Read and write tools are distinct. Delete, overwrite, move, and disconnect carry explicit risk metadata for client-side confirmation.
Conservative invoice review
Extract structured checks without approving, booking, paying, transmitting, or automatically archiving an invoice.
Standards first
The provider core uses WebDAV and OCS today, with clean boundaries for native MCP, CalDAV, CardDAV, and future Nextcloud apps.
Two identities, one safe path
Credentials never become conversation data.
ChatGPT and Codex authenticate to the bridge with OAuth. The bridge separately connects to Nextcloud through its official Login Flow and keeps the generated credential encrypted, tenant-bound, and outside model-visible responses.
Read the security modelverified OAuth identityChatGPT / Codexissuer + subject + scopes
request-scoped
public MCP boundaryBridge sessionpseudonymous tenant ID
metadataTenant store
secretsAES-256-GCM
root enforced
user-owned serviceNextcloud workspaceWebDAV + OCS providers
Natural requests, bounded tools
Ask normally.
Keep control.
The public app is designed for everyday file work, not hidden automation. Destructive actions remain visible and reviewable.
01
Show the files at the top level of my Nextcloud workspace.
↗02
Find documents with “household” in the filename.
↗03
Create a folder named Project Notes.
↗04
Review the newest invoice, but do not approve or pay it.
↗Real Nextcloud validation
The fallback path works outside the lab.
WebDAV and OCS read, write, move, download, and cleanup flows passed against Nextcloud 33.0.7. Native Nextcloud MCP was not available on that instance—the standards-based fallback still completed the full smoke test.
✓ OCS discovery✓ WebDAV read/write✓ Move and download✓ Cleanup verified
