What ChatGPT Can Actually Do with Your Spotify Account (netmaker.substack.com)

OpenAI’s new Apps SDK has a pilot integration with Spotify that—contrary to broad permissions it requests—currently delivers a focused, widget-driven experience for playlist generation and podcast recommendations. Because the integration uses the Spotify Web API and standard OAuth scopes, you explicitly grant ChatGPT a wide set of read and control permissions during auth, but most of those capabilities (device playback state, remote control, direct chat-triggered library edits or follows) aren’t actually used in conversation. Instead, playlist creation, adding saved items, and following artists happen via interactive widgets that require explicit user clicks. Technically, the integration requests scopes for reading playback/device state, saved library items, follows, and for controlling playback and modifying libraries/playlists. Useful details: playlists created are private by default (no ugc-image-upload scope, so ChatGPT can’t set artwork), created playlists aren’t auto-saved to your library without pressing the widget’s “+”, and device control APIs remain unused in chat. This pattern shows a conservative, safety-first design—sandboxed widgets limit accidental actions and expose a clear mapping between OAuth scopes and LLM features. For AI/ML practitioners, it’s a concrete example of how LLMs integrate with third-party APIs: request broad permissions for future capabilities, but surface only vetted, explicit UI-driven actions to balance personalization, privacy, and safety.