--- title: Connect Orca’s ChatGPT Plugin: Cloud Risk Context in... description: Orca Security has launched a plugin connecting its cloud security platform to ChatGPT and Codex via an MCP server, letting security teams and developers query... canonical: https://daily.dev/posts/connect-orca-s-chatgpt-plugin-cloud-risk-context-in-chat-and-codex-a4gv39cge twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Connect Orca’s ChatGPT Plugin: Cloud Risk Context in Chat and Codex | daily.dev og:description: Orca Security has launched a plugin connecting its cloud security platform to ChatGPT and Codex via an MCP server, letting security teams and developers query... og:url: https://daily.dev/posts/connect-orca-s-chatgpt-plugin-cloud-risk-context-in-chat-and-codex-a4gv39cge og:image: https://api.daily.dev/og/posts/A4GV39CGE.png og:image:alt: Connect Orca’s ChatGPT Plugin: Cloud Risk Context in Chat and Codex og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Connect Orca’s ChatGPT Plugin: Cloud Risk Context in Chat and Codex **[Orca Security Blog](https://daily.dev/sources/orca-security-blog)** · 9 min read · 0 upvotes · 0 comments ## Summary Orca Security has launched a plugin connecting its cloud security platform to ChatGPT and Codex via an MCP server, letting security teams and developers query Orca's risk data directly in chat or code editors. The plugin exposes tools for pulling alerts, assets, attack paths, effective permissions, and code-to-cloud origins, all backed by Orca's Unified Data Model that pre-correlates findings with reachability and business impact. Security teams can ask natural-language questions like CVE exposure checks, alert triage, and weekly posture reports, while developers using Codex can have alerts traced back to the offending Terraform or Dockerfile and get fix diffs generated automatically. The plugin is available now in the ChatGPT and Codex plugin directory. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How does the Orca Security plugin work with ChatGPT and Codex? It connects both tools to Orca's MCP server, which exposes Orca's cloud data as callable tools including alerts, assets, attack paths, effective permissions, and code origins. Findings are already correlated in Orca's Unified Data Model with reachability and blast radius before a prompt is typed, so the model reasons over prioritized context rather than raw scan output. _Teams wiring AI assistants into real infrastructure context can track tool integrations like this on daily.dev._ ### Can Codex fix cloud misconfigurations directly from Orca alerts? Yes, Codex can pull an Orca alert, locate the Terraform file or Dockerfile that caused it, and produce a fix as a diff for developer review. For example, it can address a missing S3 logging block or an outdated base image, and it can trace a flagged cloud asset back to the code and Terraform chain that created it to fix the source rather than the running resource. _Developers automating IaC remediation can follow workflow patterns like this on daily.dev._ ## Similar posts on daily.dev - [Bring Orca Security Context Into the AWS Console with the Orca Browser Extension](https://daily.dev/posts/bring-orca-security-context-into-the-aws-console-with-the-orca-browser-extension-ck8kgvgsi) · Orca Security Blog · 0 upvotes · 0 comments - [How to Add MCP Servers to ChatGPT](https://daily.dev/posts/how-to-add-mcp-servers-to-chatgpt-awxv0wlfn) · Docker · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#chatgpt](https://daily.dev/tags/chatgpt), [#mcp](https://daily.dev/tags/mcp), [#openai-codex](https://daily.dev/tags/openai-codex) [View this post on daily.dev](https://daily.dev/posts/connect-orca-s-chatgpt-plugin-cloud-risk-context-in-chat-and-codex-a4gv39cge) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Connect Orca’s ChatGPT Plugin: Cloud Risk Context in Chat and Codex","url":"https://daily.dev/posts/connect-orca-s-chatgpt-plugin-cloud-risk-context-in-chat-and-codex-a4gv39cge","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/connect-orca-s-chatgpt-plugin-cloud-risk-context-in-chat-and-codex-a4gv39cge"},"datePublished":"2026-09-30T15:02:11.753Z","dateModified":"2026-09-30T19:41:22.251Z","description":"Orca Security has launched a plugin connecting its cloud security platform to ChatGPT and Codex via an MCP server, letting security teams and developers query...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9447a90b9e87713923aceb315d024bbf?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9447a90b9e87713923aceb315d024bbf?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Orca Security Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Orca Security Blog","logo":"https://media.daily.dev/image/upload/s--kkQFNboJ--/f_auto,q_auto/v1780213281/logos/orca-security-blog?_a=BAMAMiWQ0","url":"https://daily.dev/sources/orca-security-blog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/connect-orca-s-chatgpt-plugin-cloud-risk-context-in-chat-and-codex-a4gv39cge","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,chatgpt,mcp,openai-codex","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Orca Security Blog","item":"https://daily.dev/sources/orca-security-blog"},{"@type":"ListItem","position":3,"name":"Connect Orca’s ChatGPT Plugin: Cloud Risk Context in Chat and Codex"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/connect-orca-s-chatgpt-plugin-cloud-risk-context-in-chat-and-codex-a4gv39cge#faq","mainEntity":[{"@type":"Question","name":"How does the Orca Security plugin work with ChatGPT and Codex?","acceptedAnswer":{"@type":"Answer","text":"It connects both tools to Orca's MCP server, which exposes Orca's cloud data as callable tools including alerts, assets, attack paths, effective permissions, and code origins. Findings are already correlated in Orca's Unified Data Model with reachability and blast radius before a prompt is typed, so the model reasons over prioritized context rather than raw scan output. Teams wiring AI assistants into real infrastructure context can track tool integrations like this on daily.dev."}},{"@type":"Question","name":"Can Codex fix cloud misconfigurations directly from Orca alerts?","acceptedAnswer":{"@type":"Answer","text":"Yes, Codex can pull an Orca alert, locate the Terraform file or Dockerfile that caused it, and produce a fix as a diff for developer review. For example, it can address a missing S3 logging block or an outdated base image, and it can trace a flagged cloud asset back to the code and Terraform chain that created it to fix the source rather than the running resource. Developers automating IaC remediation can follow workflow patterns like this on daily.dev."}}]} ```