ChatGPT Plugins for Dubai Businesses (2026): How to Get Listed, and What It Costs in AED
OpenAI's plugin directory is now one listing shared by ChatGPT and Codex. Here is what a Dubai business must build, the rules that reject most submissions, and real AED costs.
- PUBLISHED
- 05 NOV 2026
- READ TIME
- 12 MIN
- AUTHOR
- AQUARIUS · DUBAI
- UNIT
- REV 2026.09
Short answer: A ChatGPT plugin in 2026 is not a chatbot — it is a bundle of skills plus an MCP server that OpenAI lists once in a universal directory shared by ChatGPT and Codex. For a Dubai business the build is the easy half. The hard half is passing a review that demands a verified organisation, a working no-MFA demo account, a privacy policy that names your data categories, and — if you sell — a payment processor OpenAI actually supports. Most UAE merchants fail on that last point.
Why UAE businesses are suddenly asking about this
Generative AI crossed 2.5 billion active users — over 30% of humanity — in roughly three and a half years, which Cloudflare measured as more than twice the adoption speed of smartphones in its July 2026 agentic-internet report. That is not a future trend. That is already where a slice of your customers start their buying decisions.
Two more numbers from the same report explain why that hurts a conventional Dubai website. First: for every hour people now spend online looking for information, only about 15 minutes is spent on the open web. The other 45 go to assistants that read the web on their behalf. Second: 52% of crawler requests were for AI training as of June 2026, up from 22% in spring 2025, and some of the most heavily crawled content categories saw human traffic fall as much as 40% in under a year.
Against that, the UAE is about the worst place to be invisible to assistants. DataReportal puts the country at 11.3 million internet users and 99.0% internet penetration, with 23.0 million mobile connections, or 202% of the population. And UAE search remains a near-monopoly: Statcounter has Google at 95.42% of UAE search in October 2026, with Bing second at 2.71%. So your organic funnel has exactly one gatekeeper today, and a second one forming inside assistants. A plugin is how you put your own business logic inside that second one instead of waiting to be summarised by it.
Most Dubai businesses are optimising for the 15 minutes and ignoring the 45.
What a ChatGPT plugin actually is now
The vocabulary changed, and a lot of Dubai agency pitch decks are still selling the 2023 version. Per OpenAI’s current developer documentation, a plugin is up to three things in one package:
- Skills — folders containing a
SKILL.mdwith a name and a description. The description is not decoration: it is what “determines when the model considers the skill”. A vague description means your plugin never fires. - An MCP server — declared in
mcp.json, this is the part that does things: checks stock, books the viewing, pulls the invoice, files the maintenance ticket. - Optional UI — a component rendered inside the conversation, which must ship a Content Security Policy.
A plugin.json manifest sits at the root, with OpenAI-specific settings nested under an extensions.com.openai key. The strategic detail: public plugins are published once to a universal directory shared by ChatGPT and Codex — the separate app directory was folded in. One submission, two surfaces.
OpenAI’s own guidance is to prefer one focused skill over a large collection of loosely related instructions. In practice that kills the request we get most often in Dubai, which is “put our whole website in ChatGPT”. The plugins that get used do one commercially sharp job. If you have not built the server half yet, our MCP server development cost guide for Dubai covers that layer on its own.
The submission limits that cause most rejections
These are hard caps from OpenAI’s submission requirements. Write your copy to them before design starts, because a 30-character short description is brutally short and rewriting it late usually means redoing your logo lockup too.
| Submission field | Hard limit | What trips Dubai submissions |
|---|---|---|
| Display name | 30 characters | “Al Quoz Auto Parts Trading LLC” is already at the ceiling |
| Short description | 30 characters | No room for “in Dubai” and a verb — pick one |
| Long description | 4,000 characters | Rarely a problem; usually underused |
| Developer name | 80 characters | Must match your verified entity, not your trade name |
| Logo | Square, min 48×48 px, max 5 MiB | Wide bilingual Arabic-English lockups do not fit a square |
| Package name | 64 characters, lowercase and hyphens | No appending “MCP”, “MCP Server” or “Plugin” to your brand |
| Test cases | 5 positive, 3 negative | The negative cases are where thin plugins get caught |
| Also required | Semantic version, video walkthrough, release notes, dedicated test account | Customer support contact details are mandatory, not optional |
Three naming rules worth repeating because they are absolute: avoid generic names, especially single-word dictionary terms; do not bolt “MCP” or “Plugin” onto a company or product name; and trial or demo plugins will not be accepted. A soft launch to test the channel is not a submission strategy — it is a rejection. Note also that org owners can submit directly, while everyone else needs the Apps Management Write permission.
The commerce rule most UAE merchants hit head-on
If you intend to sell through the plugin, read this before you budget anything. OpenAI’s monetisation documentation currently states that plugins may conduct commerce only for physical goods, and that selling digital products or services is not allowed. OpenAI says it is “actively working to support a wider range of commerce use cases”, but as of today that excludes most of Dubai’s highest-margin plugin ideas: consulting hours, course access, SaaS seats, visa processing, insurance, subscriptions.
You also cannot link directly to a checkout or other transactional page as a workaround. There are three sanctioned paths instead: External Checkout, which OpenAI recommends; Saved Payment Methods, which “can only display saved payment methods and cannot collect new payment method credentials”; and the ChatGPT Payment Sheet with requestCheckout, which is in private beta for select marketplace partners only.
Then the detail that decides feasibility for UAE e-commerce. The supported payment service providers are Adyen, Checkout.com, Fiserv, PayPal, Stripe and Worldpay — six, and no more. Telr, Network International, PayTabs, Magnati and Amazon Payment Services are not on that list. A large share of Dubai stores run on exactly those gateways. If you are one of them, in-conversation commerce means either adding a supported PSP alongside your existing one or staying on External Checkout. We compared the local options in Telr vs Network International vs Checkout.com for UAE businesses.
Worth sizing the prize before you decide: EZDubai and Euromonitor (September 2026) put UAE e-commerce at AED 42.2 billion in 2025, growing to AED 67.2 billion by 2030 at a 9.9% CAGR, with online moving from 15.7% of retail to over 20%. Assistant-led buying is a slice of that growth, and our note on preparing a Dubai store for AI shopping agents goes deeper on the plumbing — integer minor currency units, line items with tax and fees, the complete_checkout tool, and the Agentic Commerce Protocol.
What the review actually tests
Submission runs an automated scan plus a manual review. The manual pass checks connectivity, whether your stated test cases do what you claim, undisclosed collection of personal information, whether tool annotations such as readOnlyHint, destructive and openWorldHint match real behaviour, and UI loading errors. Annotating a destructive tool as read-only reads as deceptive rather than sloppy.
Operational requirements that quietly fail Dubai builds:
- Every submission must come from a verified individual or organisation, verified in the OpenAI platform dashboard. Start this early; it is not instant.
- Reviewers need a login and password for a fully featured demo account that works “with no further configuration required” and has no MFA — no SMS or email codes. That rules out the UAE habit of SMS-OTP-only login for the test account.
- Your endpoint must be publicly accessible and not a local or testing endpoint, reachable from outside your corporate network. An internal staging box behind a VPN or an IP allowlist fails.
- Your privacy policy must state the categories of personal data collected, the purposes of use, the categories of recipients, and data retention timelines — which maps cleanly onto UAE PDPL obligations, so write it once and reuse it.
- You must gather only the minimum data required, and must not collect payment card details, protected health information, government IDs, or access credentials and authentication secrets. For Dubai that means no Emirates ID capture inside the plugin flow.
One expectation to set with your own management: OpenAI states that review timelines may vary and that expedited review is not accommodated. Do not attach a plugin launch to a GITEX or Ramadan campaign date without a fallback. Resubmission after a fix is done by re-scanning tools on the same draft.
What it costs in AED
OpenAI publishes no listing fee and no revenue-share terms for plugins, so your cost is purely build, review support and hosting. These are our own quoted ranges for Dubai clients in 2026, not market averages.
| Scope | What you get | AED | Timeline |
|---|---|---|---|
| Single-skill plugin, read-only | One focused skill, MCP server with 2–4 read tools, no UI, full directory submission pack | 18,000 – 34,000 | 2–3 weeks |
| Plugin with custom UI | Above plus an in-conversation UI component with CSP and branded states | 34,000 – 62,000 | 3–5 weeks |
| Transactional, physical goods | External Checkout integration, minor-currency-unit line items, tax and fee handling, complete_checkout tool | 62,000 – 120,000 | 5–8 weeks |
| Write-back to your systems | Auth, destructive-tool annotation audit, ERP or CRM write paths, audit logging | +22,000 – 55,000 | +2–4 weeks |
| Hosting and monitoring | Public endpoint, uptime and latency monitoring, version bumps | 1,200 – 4,500 / month | Ongoing |
| Review remediation | Rejection triage, annotation fixes, resubmission | 6,000 – 15,000 | Per cycle |
The cost of inaction is the cheaper number to ignore and the expensive one to live with: more than half of all internet traffic is now non-human, and Google still accounts for roughly 88% of referral traffic to the open web. As assistants start fulfilling intent in-conversation, that referral pipe narrows for everyone equally — except the businesses holding a listing on the other side of it.
How Aquarius does it
We start with a one-week feasibility pass, because for a meaningful share of Dubai enquiries the honest answer is “not yet”: a digital-services seller cannot transact, and a Telr-only store cannot take in-chat payment today. We would rather tell you that for a fixed fee than invoice you for a build that cannot list.
Then: one focused skill, chosen on commercial value rather than feature count. An MCP server whose tool annotations match real behaviour, reviewed by someone who did not write them. A no-MFA reviewer account on a public endpoint. A privacy policy drafted once to satisfy both OpenAI’s categories requirement and UAE PDPL. Eight test cases written as the spec, not as paperwork at the end. And the video walkthrough recorded by us.
Risk reversal: fixed-price submission pack. If the plugin is rejected for anything inside our scope — manifest, annotations, test cases, privacy copy, endpoint reachability — we fix and resubmit at no charge. Ranges are published on our pricing page, and there is no discovery fee on the feasibility call.
FAQ
Do I need an MCP server to publish a ChatGPT plugin?
If the plugin should do anything beyond supplying instructions, yes. Skills tell the model when and how to act; the MCP server performs the action against your systems. A skills-only plugin is viable for pure guidance use cases, but it cannot check your stock or book anything.
Can a Dubai company sell services through a ChatGPT plugin?
Not today. OpenAI’s documentation limits plugin commerce to physical goods and explicitly disallows selling digital products or services, and you cannot link out to a checkout page as a workaround. You can still build a lead-capture or booking-assist plugin that completes the transaction elsewhere.
Will our Telr or Network International gateway work?
Not for in-conversation payment. The supported providers are Adyen, Checkout.com, Fiserv, PayPal, Stripe and Worldpay. UAE-native gateways are not on that list, so you either add a supported PSP for this channel or use External Checkout and complete payment on your own site.
How long does review take?
OpenAI does not commit to a window, and says timelines may vary and that expedited review is not accommodated. Plan the build around a date you control and treat the listing as a bonus, not a launch dependency.
Is this worth doing while Google is still 95% of UAE search?
They are different jobs. Google drives today’s traffic; the plugin covers the 45 minutes of every search hour that no longer touch the open web. If you only have budget for one, fix search first — then claim the listing before a competitor does, because in most niches one plugin becomes the habitual one.
Next step
If you want a straight answer on whether your business can list, and what the one skill should be, send us the use case. One week, fixed fee, a written yes or no with the reason.