[cursor]

Unreviewed plugin submission. It came in through the submission form, and nobody has reviewed the server, its tools, or the listing copy yet. Please keep this PR as a draft until someone reviews it.

Submission

• Publisher handle: otc-llc
• Company: OTC LLC
• Contact: Ben Haim [email protected]
• Website: otc.network
• plugin_url (remote MCP server): https://otc.network/api/otc/mcp
• Description: Help to create a Passkey
• Testing instructions: https://otc.network/passkey?section=passkey
• Listing targets: Grok, Grok Bot, Cursor

Changes

• third_party/otc-llc/mcp.json points the otc-llc server (type: http) at the submitted URL, unchanged.
• third_party/otc-llc/.cursor-plugin/plugin.json uses category integrations, logo assets/logo.png, and "mcpServers": "./mcp.json", matching PitchBook (Add PitchBook third-party MCP plugin #796).
• third_party/otc-llc/README.md has install steps and the same MCP JSON block.
• Added a row to the root README integrations table and an entry to .cursor-plugin/marketplace.json. .claude-plugin/marketplace.json is unchanged.

Logo

I could not download the submitted logo_url (https://otc.network/otc-theta-favicon.svg). HTTPS to otc.network failed with a TLS error from the build environment, and plain HTTP returned 403. Instead, assets/logo.png is the 256×256 avatar of the verified otc-ai GitHub organization (https://github.com/otc-ai), whose public email is the submission contact, [email protected]. The avatar is OTC's theta mark, which matches the submitted favicon's name. Reviewers may want to swap in the original SVG.

Verification

• node scripts/validate-plugins.mjs passes.
• I could not reach the MCP endpoint from the build environment (same TLS failure), so the server is untested. Use the testing instructions above.

  

---

Note

Medium Risk
Adds an unreviewed third-party HTTP MCP in the authentication/passkey space; remote server tools and behavior were not validated in this change.

Overview
Adds the OTC (otc-llc) third-party integration so Cursor agents can use OTC’s hosted HTTP MCP at https://otc.network/api/otc/mcp to help users create passkeys.

The new third_party/otc-llc/ bundle includes plugin.json (integrations category, ./mcp.json), mcp.json, and a README with install steps and testing link. Root .cursor-plugin/marketplace.json and the README integrations table are updated to list the plugin (author OTC LLC).

The PR notes the submission is unreviewed and the remote MCP endpoint was not exercised in CI; logo uses a GitHub org avatar because the submitted favicon URL could not be fetched.

^{Reviewed by Cursor Bugbot for commit fd451ad. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Missing HTTP MCP version pin
  • Added minClientVersions.cursor 3.13.0 to the otc-llc plugin manifest so older Cursor builds that cannot load HTTP MCP servers are not offered the plugin.

Or push these changes by commenting:

@cursor push 5215d5936d

Preview (5215d5936d)

diff --git a/third_party/otc-llc/.cursor-plugin/plugin.json b/third_party/otc-llc/.cursor-plugin/plugin.json
--- a/third_party/otc-llc/.cursor-plugin/plugin.json
+++ b/third_party/otc-llc/.cursor-plugin/plugin.json
@@ -2,6 +2,9 @@
   "name": "otc-llc",
   "displayName": "OTC",
   "version": "1.0.0",
+  "minClientVersions": {
+    "cursor": "3.13.0"
+  },
   "description": "Help create a passkey.",
   "author": {
     "name": "OTC LLC",

_{You can send follow-ups to the cloud agent here.}

^{Reviewed by Cursor Bugbot for commit fd451ad. Configure here.}

[cursor]

Missing HTTP MCP version pin

Low Severity · Potential Edge Case

The new otc-llc plugin is a hosted type: http MCP integration but omits minClientVersions. Peer plugins pin cursor to 3.13.0, so older Cursor builds that cannot run plugin HTTP MCP can still list and install this one and then fail to connect.

 

^{Reviewed by Cursor Bugbot for commit fd451ad. Configure here.}