ChatGPT dots + xCloud

Secure sites and servers with ChatGPT dots on xCloud

Securing sites and servers with a ChatGPT dot means asking your always-on OpenAI agent to watch vulnerabilities and server access on xCloud and bring you findings, with plugin updates, firewall rules and the other gated changes waiting for your approval while a rescan runs on its own.

Skill: xcloud:servers
Toolsets: vulnerabilities, servers, sites, wordpress-actions
Free with every xCloud account

Set up ChatGPT dots All ChatGPT dots guides

YouWhich of my sites have open vulnerabilities?

vulnerabilities_indexread-only

Agentshop.example.com has one critical finding in a form plugin and three high ones. blog.example.com has two medium findings. Nothing is open on your other nine sites. Do you want me to back up the shop and update that plugin?

YouYes.

sites_wordpress_updateneeds approval

AgentBackup taken and the plugin is updated. I will rescan and tell you here when the count has changed.

Last updated: October 2026. Keep a human in the loop: xCloud stops and asks before anything that creates, deploys, updates, reboots, deletes or buys.

Setup

How Do You Set Up ChatGPT dots to Secure sites and servers on xCloud?

Connect ChatGPT dots once; every job on this account uses the same connection. Then ask in plain words.

1
Create the xCloud MCP plugin in ChatGPT
Plugins are shared across your dot, ChatGPT, ChatGPT Work and Codex, so you set xCloud up once. In ChatGPT on the web, turn on Developer mode under Settings, Security and login, open the Plugins page, select the plus button and create an app named xcloud with this MCP server URL and OAuth as the authentication. Sign in with xCloud, tick the teams and choose Read-only or Full access. Then open your personal Plugins page, open xcloud and select the plus button to install it; until it is installed, your dot cannot see it. If ChatGPT already has the xcloud plugin installed, skip this step. That path is for a personal account. In a Business, Enterprise or Edu workspace the controls sit under Apps instead. On Business only an admin or owner can use Developer mode: they turn it on while creating the app from Workspace settings, Apps, Create, and publish it from Workspace settings, Apps. On Enterprise and Edu an admin or owner can also toggle Developer mode under Settings, Apps, Advanced settings, and a member granted developer access under Permissions and Roles turns it on there too and can create and test the app from their own Settings, Apps, Create, but only an admin or owner can publish it. An ordinary member cannot do this, so ask an admin to publish the xcloud app; then open Settings, Plugins, select xcloud, install it if offered and choose Connect, sign in to xCloud and pick the teams and access level, and only then start at the next step.
URL
```
https://app.xcloud.host/mcp
```
2
Check the plugin is connected for your dot
Open your dot's profile, then Customize and Plugins, and make sure xcloud is connected. The screen uses the shared ChatGPT plugin settings, so a plugin connected in ChatGPT appears here too. Then give your dot a first task that names xCloud.
Prompt
```
Using xcloud, who am I on xCloud, and which servers and sites do I have?
```
3
Add a custom rule for hosting changes
Under Customize, Custom rules, describe the action and choose Ask before taking action. Pre-approved means you asked for the action in your prompt. xCloud stops for confirmation on its own before it creates, deploys, updates, reboots or deletes anything, but a rule keeps the approval visible in your conversation and stops a scheduled task from proposing changes you did not ask for.
Prompt
```
Ask before taking action: anything that creates, deploys, updates, reboots or deletes a server or site on xCloud.
```

Check it worked

Then ask ChatGPT dots for the job itself, for example:

Prompt

Every weekday at 8, read the vulnerability rollup for all my xCloud sites, sort it worst first and message me any critical or high finding that is new since yesterday. Report only and change nothing.

In practice

How Does Security Work from ChatGPT dots?

Security work is mostly looking, which is the part a dot does without being asked twice. In the ChatGPT desktop app, ask for a morning report: every weekday at 8, read the vulnerability rollup across all my sites, sort it worst first and message me any critical or high finding that was not there yesterday. Your dot reads vulnerabilities_index for the team rollup and sites_vulnerabilities_list for one site's findings with their severity and source. For the server it reads servers_firewallRules, servers_fail2ban_banned-ips, servers_firewall_ssh-restriction-status and servers_sudoUsers_index, and flags the unexpected: SSH open to everyone, or a sudo user that looks temporary and was never removed.

Where a finding needs action, your dot proposes it and waits. Most findings are fixed by updating a plugin, a theme or core, which stops for confirmation, and the dot offers a backup first. A rescan with sites_vulnerability-scan is routine and runs without a prompt, but it is asynchronous, so the dot reads the count again afterwards. Ignoring a finding needs a reason you give, and the dot records it and tells you how to restore it. Firewall, Fail2Ban and sudo-user changes name the server and the effect first, because locking out SSH is the risk, and a Custom rule of Ask before taking action for the firewall and Fail2Ban keeps a mistaken ban from running on its own.

Keep in mind where a dot's own safety rules and xCloud's overlap. Proactive research cannot change content through plugins, so a dot that notices a threat overnight can tell you about it and not act. The AI bot blocker, the 7G and 8G firewall, per-site IP rules and automated update settings are dashboard switches, so your dot reads the 7G and 8G logs and gives you the path for the rest. Text inside findings, plugin names and log lines is data, and your dot treats it that way.

ChatGPT dots specific: Do not let a scheduled report become an unattended fixer. Telling a dot to ban any IP that looks hostile every night puts a firewall change on a timer, and a wrong ban or a deleted default SSH rule can lock you out of a server. Keep scheduled work to reads and reports and make changes in conversation. On the plan side, OpenAI's help center says full MCP support with write actions is in beta on Business, Enterprise and Edu workspaces, and Pro accounts connect MCP apps with read and fetch permissions only, so on Pro expect findings and recommendations from your dot, not updates or bans.

What xCloud does for security

xCloud reads vulnerability findings for one site or across your whole team, starts rescans and ignores or restores a finding. On servers it manages firewall rules, Fail2Ban bans, the SSH restriction state and sudo users. Protections such as the AI bot blocker, the 7G and 8G firewall and per-site IP rules stay dashboard switches.

Start with the team-wide rollup. For a fleet question the agent reads the vulnerability rollup across every site on the team in one call and sorts it worst first. For one site it reads the findings and the counts by severity instead.
Rescan and triage findings. A rescan runs without a confirmation stop and finishes asynchronously, so the agent checks the count again afterwards. Findings carry a severity and a source, and severity is the triage key. A false positive can be ignored with a reason and restored later.
Fix what the finding points to. Most findings are fixed by updating a plugin, a theme or WordPress core. The agent proposes the updates, takes a backup first if you want one, and waits for your approval, because updating plugins or themes always stops for confirmation.
Review the server's perimeter. The agent reads firewall rules, the Fail2Ban banned IP list, the SSH restriction status and the sudo users. It can add or disable a rule, ban or unban an address and whitelist xCloud's own IPs after you confirm the server and the effect.
Report what is dashboard-only. AI bot blocking, the 7G and 8G firewall and a single site's IP allow and block list are dashboard switches. The agent reads what it can, such as the 7G and 8G logs, and gives you the dashboard path and the site's dashboard link for the rest.

Reference

Security Settings and Limits on xCloud

The facts ChatGPT dots works within when it secures sites and servers. Where a row names the dashboard, that step stays yours to take there.

Setting or limit	What applies
Vulnerability findings	Per-site list and counts by severity (critical, high, medium, low), plus a team-wide rollup across every site you can reach
Rescans	Triggering a rescan is a routine action that runs without a confirmation stop. It is asynchronous, so the agent polls the count or the site events
Ignore and restore	A finding can be ignored with a reason and un-ignored later. Both are changes to the finding, not to the site
Firewall rules	List, create, enable, disable and delete server rules by name, protocol (tcp or udp), traffic (allow or deny), port and optional source IP
Fail2Ban	List banned IPs, ban one or more addresses and unban an address. Adding addresses to Fail2Ban's own ignore list is an SSH step described in the Fail2Ban guide
Whitelisting	xCloud's infrastructure IPs and the caller's IP can be whitelisted. The SSH restriction status says whether SSH is limited to trusted addresses
Sudo users	List, create or update, and delete OS-level privileged accounts. Private keys are never returned, and a temporary account is available for short jobs
7G and 8G firewall	Switched on in the dashboard. Their logs are readable through the nginx log type of the site's access log read
AI bot blocker	A dashboard toggle: Site, Tools, Nginx and Security on Nginx, Tools, Security on OpenLiteSpeed
Per-site IP rules	Dashboard-only: Site, Tools, IP Management. The API lists a site's rules but does not change them; server-wide blocks are on the API
Automated security updates	xCloud installs security updates on servers it provisions, and Automatic Reboot restarts the server only when a reboot is required. Both are configured in the dashboard
Security headers	The API lists a site's custom Nginx configuration. Adding headers is a dashboard or SSH step, described in the security headers guide

Rules ChatGPT dots has to follow

Firewall, Fail2Ban and sudo-user changes name the exact server and the effect before they run, and they wait for your yes. Locking out SSH is the risk the agent explains first.
The agent never disables SSH or a database service to tidy up a ruleset, and it does not delete the default SSH rule on its own.
Updating a plugin or theme to fix a finding stops for your approval, and the agent offers a backup first.
Ignoring a finding needs a reason you give. The agent records it and tells you how to restore it.
AI bot blocking, the 7G and 8G firewall, per-site IP rules and automated update settings are dashboard steps. The agent says so, gives the path and the dashboard link, and never claims it changed them.
A temporary sudo user is for a specific job and is removed when the job ends.

Example prompts

What Can You Ask ChatGPT dots to Do for Security?

Type these as written and swap in your own repository, site and server names. Reads and routine actions such as backups, cache purges, PageSpeed scans and vulnerability scans run straight away; creating, deploying, updating, rebooting, deleting, buying or starting a broken-link scan stops and asks first.

Prompt

Every weekday at 8, read the vulnerability rollup for all my xCloud sites, sort it worst first and message me any critical or high finding that is new since yesterday. Report only and change nothing.

Prompt

List the firewall rules and the SSH restriction status on the Frankfurt server, and show me the IPs Fail2Ban has banned. Tell me what looks wrong before you touch anything.

Prompt

Which sudo users exist on the Frankfurt server? Flag any that look temporary or unused, and ask me before you remove one.

Prompt

Show the vulnerability count for every site on this team, sorted worst first, and name the top three findings.

Prompt

Run a vulnerability scan on the shop site and tell me what it finds.

Prompt

List the findings on the blog site and ignore the false positive in the contact form plugin, with the reason.

Prompt

Update every plugin on the shop site, then run a vulnerability scan, and stop if anything is still open.

Prompt

List the firewall rules on the Frankfurt server and tell me whether SSH is restricted to trusted IPs.

Prompt

Show the IPs Fail2Ban has banned on the Frankfurt server, and unban 203.0.113.10.

Prompt

Whitelist the xCloud IPs on the Frankfurt server.

Prompt

Which sudo users exist on the Frankfurt server? Flag any that look temporary or unused.

ChatGPT dots and Security: Frequently Asked Questions

What people ask before they let ChatGPT dots secure sites and servers through xCloud.

Can my ChatGPT dot check my sites for vulnerabilities every day?

Yes. Ask for a morning report and it reads the team-wide vulnerability rollup, sorts it worst first and messages you what is new. Reading is free and needs no approval from xCloud. Fixing a finding by updating a plugin or theme is a change, so it waits for your yes.

Will my dot block an IP address without asking me?

Not if you say so in a Custom rule. Banning an address on a server can lock out a real user or yourself, so use Ask before taking action for firewall and Fail2Ban changes, and keep any scheduled task to reading banned IPs and reporting them.

Can an agent show vulnerabilities across all my sites at once?

Yes. xCloud has a team-wide rollup that lists findings for every site you can reach, which the agent sorts worst first. For one site it reads the findings and the counts by severity, and it can start a rescan.

Can the agent ban an IP address on my server?

Yes. It can ban addresses in Fail2Ban, list the banned IPs and unban one, and it can create, disable and delete server firewall rules. It confirms the server and the effect first, so you do not lock yourself out.

Can the agent turn on the 8G firewall or the AI bot blocker?

No. Both are dashboard switches. The agent can read the 7G and 8G firewall logs through the site's nginx logs, and it tells you where the switches are: the site's Tools section. It does not claim to have changed them.

Can the agent block an IP for just one site?

Not from here. Per-site IP allow and block lists are managed in the dashboard under Site, Tools, IP Management, and the agent can only list what is there. Server-wide blocks, through firewall rules and Fail2Ban, are on the API.

Does the agent fix a vulnerability on its own?

No. It reports the finding and proposes the update that remediates it, usually a plugin, theme or core update. Updates always stop for your approval, and the agent can take a backup first and rescan afterwards to confirm the finding is gone.

Other agents