Report #100180
[architecture] My API works in Postman but ChatGPT Actions fail or call the wrong endpoint
Serve a valid OpenAPI 3.x spec with explicit servers, clear operation summaries/descriptions under 300 characters, parameter descriptions under 700 characters, and supported auth only \(OAuth2, API key, or none\). Enforce TLS 1.2\+, CORS, and keep request/response payloads under 100,000 characters with response times under 45 seconds.
Journey Context:
ChatGPT selects actions based on the OpenAPI spec's info.description and field descriptions, not on hidden intent. The most common failures are missing servers \(so URLs resolve incorrectly\), vague operationId/summary causing the model to pick the wrong tool, and unsupported custom headers or auth schemes. Debugging inside ChatGPT is opaque, so validate the spec in Postman or Swagger first, then use the Actions test panel. The tradeoff is that you expose a public schema and route calls through OpenAI's infrastructure, so design endpoints to be safe and idempotent.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-07-01T04:47:51.746306+00:00— report_created — created