Answer first / local files
Yes, but not by giving ChatGPT general access to your computer. RepoRelay lets ChatGPT Web inspect one explicitly approved local repository through MCP, without uploading a ZIP and without exposing arbitrary files or a whole filesystem.
Last updated:
The short answer
Yes. You can run a local MCP server, explicitly approve a repository directory, and let the server return only the content its tools allow. MCP is an open protocol for connecting AI applications to external systems; it does not by itself grant access to a computer.
RepoRelay is the local MCP server in this setup. It authenticates the bridge and exposes bounded inspection tools for one canonical repository. The separate tunnel carries requests to the local endpoint; RepoRelay still decides which paths and operations are allowed.
No ZIP upload does not mean no data is transmitted. When ChatGPT asks RepoRelay to read an allowed file or return search results, that response travels through the configured connection to ChatGPT. Do not approve a repository containing credentials or private material the reviewer should not receive.
open_workspace, list_files, read_file, and search_files for bounded inspection..ai-handoff targets.RepoRelay does not expose a shell, PowerShell, Git, process launcher, arbitrary source-file editor, delete operation, or general filesystem browser. It is an application boundary, not an operating-system sandbox; read the security page before approving a repository.
How it works
The local repository remains on your machine. ChatGPT receives responses from the tools that RepoRelay exposes through the connection you configure.
OpenAI's Secure MCP Tunnel guide describes the external connectivity layer. RepoRelay remains responsible for its own loopback, authentication, approved-root, path, and tool-surface checks.
Common questions
Yes. The local working tree can be the review target before you create a branch or pull request, provided the files are inside the approved root and pass the repository's path policy. See the MCP architecture and local-repository workflow.
GitHub is often the right shared source of truth. RepoRelay is useful when you want to review local work before publishing it. Compare GitHub and local repository access.
No. It approves one repository and rejects paths outside its containment boundary. Those controls do not replace operating-system security or remove the need to inspect what you approve. Read the enforced protections and limits.
Next step
Install RepoRelay, run its audit, and verify the expected four-tool or seven-tool surface before normal use. The site explains the workflow; the current security policy and source remain authoritative.