[cursor]

Unreviewed third-party plugin submission. Nobody at Cursor has tested or reviewed this plugin yet. Leave the testing checkbox unchecked.

Adds third_party/ultiwrite/ as a remote MCP plugin:

• mcp.json with server ultiwrite (type: http) pointing at the submitted URL, unchanged
• .cursor-plugin/plugin.json with "mcpServers": "./mcp.json" and "logo": "assets/logo.png" (same shape as PitchBook, Add PitchBook third-party MCP plugin #796)
• README with install steps and the MCP block, MIT LICENSE
• One row in the root README integrations table and one entry in .cursor-plugin/marketplace.json (.claude-plugin/marketplace.json left alone)

Submission

• Contact: Dennis Liu, DWS Offshore Fund dba Ultiwrite, [email protected]
• Publisher handle: ultiwrite
• Website: https://dwsoffshorepartners.com
• plugin_url: https://dwsoffshorepartners.com/api/integrations/ultiwrite/mcp
• Listing targets: Grok Bot, Cursor
• Description: Asymmetric diligence engine with document forensics. Generalized commercial diligence—upload authorized evidence and receive an investigated, source-backed assessment of what holds up, what does not, and what changes the decision (not a general response about the documents).

Testing instructions (as submitted; password removed)

v0.7.3 steps/CSVs: https://github.com/dennis430/ultiwrite-plugins/blob/00204784fd0be1e21039bb203b5867349726b0dd/grokbot/TESTING.md
Login: https://engine.dwsoffshorepartners.com
User: [email protected]
Password: [removed from this public PR; see the original submission]
Website login verified. Per host: OAuth; analyze linked CSVs; follow processing/release; reopen findings and export as same account. Cursor loads 0.7.3 (4 skills/8 tools), but chat is blocked by weekly limit. Full Cursor/Grok Bot journeys remain unverified. Leave testing checkbox unchecked.

Notes for review

• Logo was downloaded from the submitted logo_url (raw.githubusercontent.com, dennis430/ultiwrite-plugins), a 512×512 PNG.
• The MCP host was unreachable from the build VM, so the endpoint and its OAuth flow were not checked.
• The publisher's repo (dennis430/ultiwrite-plugins/cursor) also ships skills and uses type: streamable-http. Because plugin_url is a hosted MCP URL rather than a GitHub repo, this PR only includes the MCP server; skills were not copied.
• node scripts/validate-plugins.mjs passes.
• Tested end to end in Cursor

  

---

Note

Medium Risk
Introduces an unreviewed third-party hosted MCP endpoint with OAuth; agents may upload sensitive diligence evidence to an external service whose behavior was not verified in this PR.

Overview
Adds the Ultiwrite third-party integration to the Cursor plugin marketplace so agents can connect to Ultiwrite’s hosted MCP server over OAuth.

The new third_party/ultiwrite/ package mirrors other URL-only MCP plugins (e.g. PitchBook): mcp.json points type: http at https://dwsoffshorepartners.com/api/integrations/ultiwrite/mcp, and .cursor-plugin/plugin.json wires ./mcp.json plus listing metadata, logo, README, and MIT LICENSE. Root .cursor-plugin/marketplace.json and the integrations table in README.md gain a matching ultiwrite entry.

Per the PR notes, this is an unreviewed publisher submission: runtime tools/skills live on the remote host (not vendored here), and end-to-end Cursor testing is still unchecked.

^{Reviewed by Cursor Bugbot for commit 5f48b8d. Bugbot is set up for automated code reviews on this repo. Configure here.}