diff --git a/apps/mcp/src/server/index.ts b/apps/mcp/src/server/index.ts
index f392ddbd..8bc99a62 100644
--- a/apps/mcp/src/server/index.ts
+++ b/apps/mcp/src/server/index.ts
@@ -70,6 +70,10 @@ function resourceMetadata(c: Context<{ Bindings: Bindings }>) {
 app.get("/.well-known/oauth-protected-resource", resourceMetadata)
 app.get(PROTECTED_RESOURCE_METADATA_PATH, resourceMetadata)
 
+app.get("/.well-known/openai-apps-challenge", (c) => {
+	return c.text(c.env.OPENAI_APPS_CHALLENGE || "")
+})
+
 app.get("/.well-known/oauth-authorization-server", async (c) => {
 	const apiUrl = c.env.API_URL || DEFAULT_API_URL
 
diff --git a/apps/mcp/src/server/types.ts b/apps/mcp/src/server/types.ts
index ca37aaad..c4bc13d5 100644
--- a/apps/mcp/src/server/types.ts
+++ b/apps/mcp/src/server/types.ts
@@ -14,4 +14,5 @@ export interface ServerEnv {
 	ALLOWED_MCP_ORIGIN_HOSTNAMES?: string
 	POSTHOG_API_KEY?: string
 	POSTHOG_HOST?: string
+	OPENAI_APPS_CHALLENGE?: string
 }