[callumalpass]

Summary

• Serve the OpenAI Plugin Directory ownership challenge at the origin-root well-known path.
• The submission portal explicitly permits mdbase.dev as a parent of the MCP hostname mcp.mdbase.dev, avoiding a gateway runtime release.
• This is a public domain-verification token, not a credential.

Validation

• File is plain ASCII text with the exact challenge shown by the mdbase organization submission draft.
• Remote Astro build was attempted; this fresh worktree lacks generated src/data/mcp-tools.json. The existing Site checks workflow prepares the pinned sources before building. No unrelated source or workflow changes included.
• Verify the deployed endpoint and complete the portal check after merge.

Related plugin package: mdbase-dev/mdbase-connect#1331