feat(third_party): add 9 publicly-released Grok connectors as third-party MCP plugins - #345
feat(third_party): add 9 publicly-released Grok connectors as third-party MCP plugins#345minupalaniappan wants to merge 6 commits into
Conversation
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.
Autofix Details
Bugbot Autofix prepared fixes for both issues found in the latest run.
- ✅ Fixed: Bigdata plugin missing API-key auth
- Added the official x-api-key header and BIGDATA_API_KEY plugin variable so Cursor collects a key instead of treating Bigdata as OAuth-only.
- ✅ Fixed: IBKR uses Grok MCP URL
- Switched the plugin to https://api.ibkr.com/v1/api/mcp-public, the URL Interactive Brokers documents for Cursor's Add MCP Server flow.
Or push these changes by commenting:
@cursor push 7a5ccd2e8d
Preview (7a5ccd2e8d)
diff --git a/third_party/bigdata/.cursor-plugin/plugin.json b/third_party/bigdata/.cursor-plugin/plugin.json
--- a/third_party/bigdata/.cursor-plugin/plugin.json
+++ b/third_party/bigdata/.cursor-plugin/plugin.json
@@ -29,5 +29,18 @@
"research",
"mcp"
],
+ "variables": {
+ "type": "object",
+ "properties": {
+ "BIGDATA_API_KEY": {
+ "type": "string",
+ "title": "Bigdata.com API key",
+ "description": "API key from the Bigdata.com Developer Platform under API Keys."
+ }
+ },
+ "required": [
+ "BIGDATA_API_KEY"
+ ]
+ },
"mcpServers": "./mcp.json"
}
diff --git a/third_party/bigdata/CHANGELOG.md b/third_party/bigdata/CHANGELOG.md
--- a/third_party/bigdata/CHANGELOG.md
+++ b/third_party/bigdata/CHANGELOG.md
@@ -5,5 +5,5 @@
## 1.0.0 — initial release
- Added the `bigdata` MCP server pointing at `https://mcp.bigdata.com`.
-- Auth uses OAuth — no API key or client ID to configure.
+- Auth uses a Bigdata.com API key supplied by the user as an `x-api-key` header (`${BIGDATA_API_KEY}`).
- Logo: Bigdata.com's official mark.
diff --git a/third_party/bigdata/README.md b/third_party/bigdata/README.md
--- a/third_party/bigdata/README.md
+++ b/third_party/bigdata/README.md
@@ -8,7 +8,7 @@
1. Open **Cursor Settings → Plugins**.
2. Search for **Bigdata.com**.
-3. Click **Install**, then complete the sign-in prompt.
+3. Click **Install**, then set your Bigdata.com API key (below).
Or run `/add-plugin bigdata` in chat.
@@ -19,19 +19,24 @@
"mcpServers": {
"bigdata": {
"type": "http",
- "url": "https://mcp.bigdata.com"
+ "url": "https://mcp.bigdata.com",
+ "headers": {
+ "x-api-key": "${BIGDATA_API_KEY}"
+ }
}
}
}-Auth is OAuth. Cursor prompts for sign-in when the plugin connects; there is no client ID or personal access token to configure.
+Auth is a Bigdata.com API key sent in an x-api-key header. Create one in the Developer Platform under API Keys, then set it in Dashboard → Plugins → Configure. Do not commit the key.
The hosted runtime is the source of truth for tool names and schemas.
Docs
- Bigdata.com: https://bigdata.com
+- Cursor MCP setup: https://docs.bigdata.com/mcp-reference/api-integrations/mcp-api-integration
+- API keys: https://docs.bigdata.com/api-rest/authentication - Server URL: https://mcp.bigdata.com
License
diff --git a/third_party/bigdata/mcp.json b/third_party/bigdata/mcp.json
--- a/third_party/bigdata/mcp.json
+++ b/third_party/bigdata/mcp.json
@@ -2,7 +2,10 @@
"mcpServers": {
"bigdata": {
"type": "http",
-
"url": "https://mcp.bigdata.com"
-
"url": "https://mcp.bigdata.com", -
"headers": { -
"x-api-key": "${BIGDATA_API_KEY}" -
}
}
}
}
diff --git a/third_party/interactive-brokers/CHANGELOG.md b/third_party/interactive-brokers/CHANGELOG.md
--- a/third_party/interactive-brokers/CHANGELOG.md
+++ b/third_party/interactive-brokers/CHANGELOG.md
@@ -4,6 +4,6 @@
1.0.0 — initial release
-- Added the interactive-brokers MCP server pointing at https://api.ibkr.com/v1/api/mcp.
+- Added the interactive-brokers MCP server pointing at https://api.ibkr.com/v1/api/mcp-public.
- Auth uses OAuth — no API key or client ID to configure.
- Logo: Interactive Brokers's official mark.
diff --git a/third_party/interactive-brokers/README.md b/third_party/interactive-brokers/README.md
--- a/third_party/interactive-brokers/README.md
+++ b/third_party/interactive-brokers/README.md
@@ -19,7 +19,7 @@
"mcpServers": {
"interactive-brokers": {
"type": "http",
-
"url": "https://api.ibkr.com/v1/api/mcp"
-
}
"url": "https://api.ibkr.com/v1/api/mcp-public"
}
}
@@ -32,7 +32,7 @@
Docs
- Interactive Brokers: https://www.interactivebrokers.com/campus/ibkr-api-page/
-- Server URL: https://api.ibkr.com/v1/api/mcp
+- Server URL: https://api.ibkr.com/v1/api/mcp-public
License
diff --git a/third_party/interactive-brokers/mcp.json b/third_party/interactive-brokers/mcp.json
--- a/third_party/interactive-brokers/mcp.json
+++ b/third_party/interactive-brokers/mcp.json
@@ -2,7 +2,7 @@
"mcpServers": {
"interactive-brokers": {
"type": "http",
-
"url": "https://api.ibkr.com/v1/api/mcp"
-
}
"url": "https://api.ibkr.com/v1/api/mcp-public"
}
}
</details>
<sub>You can send follow-ups to the cloud agent <a href="https://cursor.com/agents/bc-7c9bfda6-42cc-435d-b191-a657a0dfec55">here</a>.</sub>
</details>
Package the hosted MCP connectors grok.com offers today that the Cursor marketplace does not: Axiom, Bigdata.com, Cal.com, Coinbase, DeepWiki, Gamma, Google Cloud BigQuery, Google Cloud SQL, Interactive Brokers, Meltwater, S&P Global, Webull. OAuth user login where the vendor supports it; Bigdata.com and Meltwater use an API key header variable like Hunter. Server URLs come from Grok's production connector catalog.
ff64198 to
8e8d6ad
Compare
minupalaniappan
changed the title
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.
Autofix Details
Bugbot Autofix prepared a fix for the issue found in the latest run.
- ✅ Fixed: Marketplace descriptions diverge from manifests
- Updated marketplace.json so all 12 new plugin listings use the same description as their plugin.json manifests.
Or push these changes by commenting:
@cursor push da45f72ff6
Preview (da45f72ff6)
diff --git a/.cursor-plugin/marketplace.json b/.cursor-plugin/marketplace.json
--- a/.cursor-plugin/marketplace.json
+++ b/.cursor-plugin/marketplace.json
@@ -351,62 +351,62 @@
{
"name": "axiom",
"source": "third_party/axiom",
- "description": "Query logs, traces, and datasets with APL."
+ "description": "Query logs, traces, and metrics with APL and manage monitors."
},
{
"name": "bigdata",
"source": "third_party/bigdata",
- "description": "Search financial news, filings, and transcripts."
+ "description": "Search financial news, filings, transcripts, and company data."
},
{
"name": "cal",
"source": "third_party/cal",
- "description": "Check availability and book, cancel, or reschedule."
+ "description": "Manage bookings, event types, schedules, and availability."
},
{
"name": "coinbase",
"source": "third_party/coinbase",
- "description": "Read balances, prices, and transactions."
+ "description": "Check balances, get quotes, and preview or place trades."
},
{
"name": "deepwiki",
"source": "third_party/deepwiki",
- "description": "Read AI-generated docs for any GitHub repository."
+ "description": "Read AI-generated docs and ask questions about any public repo."
},
{
"name": "gamma",
"source": "third_party/gamma",
- "description": "Generate presentations, documents, and websites."
+ "description": "Generate presentations, documents, and webpages."
},
{
"name": "google-cloud-bigquery",
"source": "third_party/google-cloud-bigquery",
- "description": "Explore datasets and run SQL queries."
+ "description": "Explore datasets and tables and run SQL queries."
},
{
"name": "google-cloud-sql",
"source": "third_party/google-cloud-sql",
- "description": "Inspect and manage Cloud SQL instances and databases."
+ "description": "Manage Cloud SQL instances, users, and backups, and run SQL."
},
{
"name": "interactive-brokers",
"source": "third_party/interactive-brokers",
- "description": "View accounts, positions, orders, and market data."
+ "description": "Review positions, balances, P&L, and draft trade instructions."
},
{
"name": "meltwater",
"source": "third_party/meltwater",
- "description": "Search media coverage, social mentions, and insights."
+ "description": "Search media and social mentions and pull analytics."
},
{
"name": "sp-global",
"source": "third_party/sp-global",
- "description": "Query company financials and market data via Kensho."
+ "description": "Query S&P Capital IQ financials, prices, and transcripts."
},
{
"name": "webull",
"source": "third_party/webull",
- "description": "View accounts, positions, orders, and quotes."
+ "description": "View accounts, positions, orders, watchlists, and market data."
}
]
}You can send follow-ups to the cloud agent here.
….com, DeepWiki, Google Cloud SQL) Per the live grok-backend-connector-catalog-controls GrowthBook config these five are internal-only on grok.com, so they are not part of the Grok->Cursor parity set.
minupalaniappan
changed the title
Both are publicly visible in Grok's catalog (Excalidraw: all, Daloopa: business) and absent from Cursor. Endpoints come from the vendors' own MCP docs and were probed directly: Excalidraw serves tools/list with no auth at https://mcp.excalidraw.com/mcp; Daloopa returns 401 with RFC 9728 resource_metadata at https://mcp.daloopa.com/server/mcp (standard MCP OAuth).
minupalaniappan
changed the title
BigQuery showed the generic Google G; now the BigQuery product icon from Google Cloud's architecture icon set on a white tile. Gamma was a blurry 48px upscale; now the 192px mark from the gamma-app GitHub org. S&P Global was Kensho's logo; now the S&P Global mark redrawn at native resolution.
…support Probing each endpoint's OAuth discovery showed two mismatches with the vendor docs the first draft relied on. Meltwater advertises standard MCP OAuth with dynamic client registration, so the apikey header variable is dropped in favour of the plain OAuth flow. Coinbase's authorization server (login.coinbase.com) publishes no registration endpoint, so the plugin now declares CLIENT_ID / CLIENT_SECRET variables and forwards them through MCP auth, the same pattern as gong, hubspot, and docusign.
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.
Bugbot Autofix is ON. A cloud agent has been kicked off to fix the reported issues.
Reviewed by Cursor Bugbot for commit 72cc418. Configure here.
| "CLIENT_ID", | ||
| "CLIENT_SECRET" | ||
| ] | ||
| }, |
There was a problem hiding this comment.
Coinbase OAuth clients are unobtainable
High Severity · Logic Bug
The plugin now requires CLIENT_ID and CLIENT_SECRET from a Coinbase Developer Platform OAuth app. Coinbase restricts OAuth client creation to approved partners, and Coinbase for Agents documents URL-only sign-in for allowlisted harnesses, not a BYO app. Typical marketplace users cannot finish Setup, so the plugin never connects.
Additional Locations (2)
Reviewed by Cursor Bugbot for commit 72cc418. Configure here.
1 participant
Summary
third_party/, one per hosted MCP connector that grok.com offers publicly today and the Cursor marketplace does not. Each follows the Attio (Add Attio third-party MCP plugin #339) / Hunter (Add Hunter third-party MCP plugin (API key header auth) #340) shape: URL-onlymcp.json, OAuth user login where the vendor supports it, an API-key header variable where it does not.connector_catalogtable (164 curated-MCP rows), the live GrowthBook configgrok-backend-connector-catalog-controls(visibilityall/consumer/business), and Cursor production (the anysphere team'sget-effective-user-plugins, the publiccursor.com/marketplacelisting, exact MCP-URL matches). GrowthBook marks 28 catalog rows public; 17 are already on Cursor, 9 are in this PR, 2 (Robinhood, NetSuite) are being built first-party. No gaps.mcp_server_urlcolumn inconnector_catalogexactly, except IBKR (see Notes).internal) are excluded; an earlier revision included five of them (Axiom, Bigdata.com, Cal.com, DeepWiki, Google Cloud SQL) and they were dropped in f12224d..cursor-plugin/marketplace.jsonand the root README table.coinbasehttps://agents.coinbase.com/mcpCLIENT_ID/CLIENT_SECRETvariables (no DCR)gammahttps://mcp.gamma.app/mcpgoogle-cloud-bigqueryhttps://bigquery.googleapis.com/mcpinteractive-brokershttps://api.ibkr.com/v1/api/mcp-publicmeltwaterhttps://api.meltwater.com/v2/mcpsp-globalhttps://kfinance.kensho.com/integrations/mcpwebullhttps://api.webull.com/mcpexcalidrawhttps://mcp.excalidraw.com/mcpdaloopahttps://mcp.daloopa.com/server/mcpMCP
Representative OAuth entry (Gamma). Coinbase adds an
authblock withCLIENT_ID/CLIENT_SECRETexactly like Gong/HubSpot/DocuSign.{ "mcpServers": { "gamma": { "type": "http", "url": "https://mcp.gamma.app/mcp" } } }Logos
All 192×192 PNG, each vendor's official mark:
coinbase,excalidraw,daloopa,gammacoinbase,excalidraw,daloopa,gamma-app)google-cloud-bigquerygmail/outlook)sp-globalinteractive-brokers,meltwater,webullTest plan
node scripts/validate-plugins.mjs) for all 9marketplace.json,plugin.json, and the README table carry identical descriptionsconnector_catalog.mcp_server_urlinitialize/tools/listwith no auth; Daloopa returns401with RFC 9728resource_metadata(standard MCP OAuth)get_themeson Gamma,get_account_liston Webull,list_dataset_idson BigQuery,discover_companieson Daloopa,create_viewon Excalidraw)roles/mcp.toolUserNotes
interactive-brokersuses/mcp-public, which IBKR documents for custom clients; Grok's catalog has/mcp(same authorization server).resource_metadata→ authorization-server metadata →registration_endpoint). Seven support DCR and work as plain URLs. Two do not:login.coinbase.compublishes full OAuth metadata but noregistration_endpoint, and Cursor has no pre-registered Coinbase client. Follows the Gong/HubSpot/DocuSign pattern:CLIENT_ID/CLIENT_SECRETvariables the user creates in the Coinbase Developer Platform portal; README has the redirect URIs.MCP_OAUTH_PROVIDER_POLICIES. everysphere #1042504 addsbigquery.googleapis.comthere. Merge that first, or this card ships dead. Consent-screen verification ofauth/bigqueryoncursor-gws-prodshould also be confirmed.apikeyvariable was dropped in favour of the plain OAuth flow.gmail.api.excalidraw.com/api/v1/mcp).Note
Medium Risk
Additive packaging only, but several connectors touch live trading (Coinbase), brokerage accounts, or billable/writable cloud data (BigQuery), so misconfiguration or agent misuse has real user impact.
Overview
Adds nine new third-party integration plugins to the Cursor marketplace, each packaging a vendor-hosted HTTP MCP endpoint (same shape as Attio/Hunter):
plugin.json,mcp.json, README, changelog, and license underthird_party/.Registers coinbase, gamma, google-cloud-bigquery, interactive-brokers, meltwater, sp-global, webull, excalidraw, and daloopa in
.cursor-plugin/marketplace.jsonand the root README plugin table.Most plugins are OAuth sign-in only via
"type": "http"URLs. Coinbase is different: it requires admin-configuredCLIENT_ID/CLIENT_SECRETplugin variables forwarded in MCPauthbecause Coinbase does not support dynamic client registration. Excalidraw uses the public server with no credentials.Capabilities exposed to agents are entirely on the remote MCP servers (trading/portfolio, BigQuery SQL, financial research, media analytics, diagram export, etc.); this PR does not add local MCP wrappers or runtime code.
Reviewed by Cursor Bugbot for commit 72cc418. Bugbot is set up for automated code reviews on this repo. Configure here.