Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .cursor-plugin/marketplace.json
Original file line number Diff line number Diff line change
Expand Up @@ -657,6 +657,11 @@
"name": "rippling",
"source": "third_party/rippling",
"description": "Look up people, time off, and company policy in Rippling, and file time-off requests and draft hires."
},
{
"name": "corsair",
"source": "third_party/corsair",
"description": "Use your connected apps from your agent: read and act on them, search synced data, and set up automations."
}
]
}
1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -121,6 +121,7 @@ Official Cursor plugins for popular developer tools, frameworks, and SaaS produc
| `ringcentral-chat` | [RingCentral Chat](third_party/ringcentral-chat/) | Cursor | Integrations | Read team chats and posts, send messages, and manage teams, tasks, and notes. |
| `servicenow` | [ServiceNow](third_party/servicenow/) | Cursor | Integrations | Call the tools your admin publishes on a ServiceNow instance. |
| `rippling` | [Rippling](third_party/rippling/) | Cursor | Integrations | Look up people, time off, and company policy in Rippling, and file time-off requests and draft hires. |
| `corsair` | [Corsair](third_party/corsair/) | Cursor | Integrations | Use your connected apps from your agent: read and act on them, search synced data, and set up automations. |
Author values match each plugin’s `plugin.json` `author.name` (Cursor lists `[email protected]` in the manifest).

## Repository structure
Expand Down
28 changes: 28 additions & 0 deletions third_party/corsair/.cursor-plugin/plugin.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
{
"name": "corsair",
"displayName": "Corsair",
"version": "0.1.2",
"description": "Use your connected apps from your agent: read and act on them, search synced data, and set up automations.",
"author": {
"name": "Cursor",
"email": "[email protected]"
},
"homepage": "https://corsair.dev",
"repository": "https://github.com/corsairdev/agent-plugins",
"license": "Apache-2.0",
"logo": "assets/logo.png",

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Listing logo exceeds size limit

High Severity · Bugbot Rules

The listing logo assets/logo.png is a 512×512 8-bit RGBA PNG whose IDAT stream uses zlib method x\x01 (no compression). That payload is about 1MB, over the marketplace 512KiB cap, so the Corsair listing is rejected.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 3626d92. Configure here.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bugbot Autofix determined this is a false positive.

third_party/corsair/assets/logo.png is a valid 512×512 RGBA PNG of 177,059 bytes, under the 524,288-byte marketplace cap; zlib header 0x78 0x01 marks fastest compression, not an uncompressed ~1MB payload.

You can send follow-ups to the cloud agent here.

"keywords": [
"corsair",
"integrations",
"automation",
"mcp"
],
"category": "integrations",
"tags": [
"corsair",
"automation",
"mcp"
],
"mcpServers": "./mcp.json",
"skills": "./skills/"
}
191 changes: 191 additions & 0 deletions third_party/corsair/LICENSE
Original file line number Diff line number Diff line change
@@ -0,0 +1,191 @@
Apache License
Version 2.0, January 2004
http://www.apache.org/licenses/

TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION

1. Definitions.

"License" shall mean the terms and conditions for use, reproduction,
and distribution as defined by Sections 1 through 9 of this document.

"Licensor" shall mean the copyright owner or entity authorized by
the copyright owner that is granting the License.

"Legal Entity" shall mean the union of the acting entity and all
other entities that control, are controlled by, or are under common
control with that entity. For the purposes of this definition,
"control" means (i) the power, direct or indirect, to cause the
direction or management of such entity, whether by contract or
otherwise, or (ii) ownership of fifty percent (50%) or more of the
outstanding shares, or (iii) beneficial ownership of such entity.

"You" (or "Your") shall mean an individual or Legal Entity
exercising permissions granted by this License.

"Source" form shall mean the preferred form for making modifications,
including but not limited to software source code, documentation
source, and configuration files.

"Object" form shall mean any form resulting from mechanical
transformation or translation of a Source form, including but
not limited to compiled object code, generated documentation,
and conversions to other media types.

"Work" shall mean the work of authorship, whether in Source or
Object form, made available under the License, as indicated by a
copyright notice that is included in or attached to the work
(which shall not include Communications that are clearly marked or
otherwise designated in writing by the copyright owner as "Not a Work").

"Derivative Works" shall mean any work, whether in Source or Object
form, that is based on (or derived from) the Work and for which the
editorial revisions, annotations, elaborations, or other modifications
represent, as a whole, an original work of authorship. For the purposes
of this License, Derivative Works shall not include works that remain
separable from, or merely link (or bind by name) to the interfaces of,
the Work and Derivative Works thereof.

"Contribution" shall mean any work of authorship, including
the original version of the Work and any modifications or additions
to that Work or Derivative Works thereof, that is intentionally
submitted to Licensor for inclusion in the Work by the copyright owner
or by an individual or Legal Entity authorized to submit on behalf of
the copyright owner. For the purposes of this definition, "submitted"
means any form of electronic, verbal, or written communication sent
to the Licensor or its representatives, including but not limited to
communication on electronic mailing lists, source code control systems,
and issue tracking systems that are managed by, or on behalf of, the
Licensor for the purpose of discussing and improving the Work, but
excluding communication that is conspicuously marked or otherwise
designated in writing by the copyright owner as "Not a Contribution".

"Contributor" shall mean Licensor and any individual or Legal Entity
on behalf of whom a Contribution has been received by Licensor and
subsequently incorporated within the Work.

2. Grant of Copyright License. Subject to the terms and conditions of
this License, each Contributor hereby grants to You a perpetual,
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
copyright license to reproduce, prepare Derivative Works of,
publicly display, publicly perform, sublicense, and distribute the
Work and such Derivative Works in Source or Object form.

3. Grant of Patent License. Subject to the terms and conditions of
this License, each Contributor hereby grants to You a perpetual,
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
(except as stated in this section) patent license to make, have made,
use, offer to sell, sell, import, and otherwise transfer the Work,
where such license applies only to those patent claims licensable
by such Contributor that are necessarily infringed by their
Contribution(s) alone or by combination of their Contribution(s)
with the Work to which such Contribution(s) was submitted. If You
institute patent litigation against any entity (including a
cross-claim or counterclaim in a lawsuit) alleging that the Work
or a Contribution incorporated within the Work constitutes direct
or contributory patent infringement, then any patent licenses
granted to You under this License for that Work shall terminate
as of the date such litigation is filed.

4. Redistribution. You may reproduce and distribute copies of the
Work or Derivative Works thereof in any medium, with or without
modifications, and in Source or Object form, provided that You
meet the following conditions:

(a) You must give any other recipients of the Work or
Derivative Works a copy of this License; and

(b) You must cause any modified files to carry prominent notices
stating that You changed the files; and

(c) You must retain, in the Source form of any Derivative Works
that You distribute, all copyright, patent, trademark, and
attribution notices from the Source form of the Work,
excluding those notices that do not pertain to any part of
the Derivative Works; and

(d) If the Work includes a "NOTICE" text file as part of its
distribution, then any Derivative Works that You distribute must
include a readable copy of the attribution notices contained
within such NOTICE file, excluding those notices that do not
pertain to any part of the Derivative Works, in at least one
of the following places: within a NOTICE text file distributed
as part of the Derivative Works; within the Source form or
documentation, if provided along with the Derivative Works; or,
within a display generated by the Derivative Works, if and
wherever such third-party notices normally appear. The contents
of the NOTICE file are for informational purposes only and
do not modify the License. You may add Your own attribution
notices within Derivative Works that You distribute, alongside
or as an addendum to the NOTICE text from the Work, provided
that such additional attribution notices cannot be construed
as modifying the License.

You may add Your own copyright statement to Your modifications and
may provide additional or different license terms and conditions
for use, reproduction, or distribution of Your modifications, or
for any such Derivative Works as a whole, provided Your use,
reproduction, and distribution of the Work otherwise complies with
the conditions stated in this License.

5. Submission of Contributions. Unless You explicitly state otherwise,
any Contribution intentionally submitted for inclusion in the Work
by You to the Licensor shall be under the terms and conditions of
this License, without any additional terms or conditions.
Notwithstanding the above, nothing herein shall supersede or modify
the terms of any separate license agreement you may have executed
with Licensor regarding such Contributions.

6. Trademarks. This License does not grant permission to use the trade
names, trademarks, service marks, or product names of the Licensor,
except as required for reasonable and customary use in describing the
origin of the Work and reproducing the content of the NOTICE file.

7. Disclaimer of Warranty. Unless required by applicable law or
agreed to in writing, Licensor provides the Work (and each
Contributor provides its Contributions) on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
implied, including, without limitation, any warranties or conditions
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
PARTICULAR PURPOSE. You are solely responsible for determining the
appropriateness of using or redistributing the Work and assume any
risks associated with Your exercise of permissions under this License.

8. Limitation of Liability. In no event and under no legal theory,
whether in tort (including negligence), contract, or otherwise,
unless required by applicable law (such as deliberate and grossly
negligent acts) or agreed to in writing, shall any Contributor be
liable to You for damages, including any direct, indirect, special,
incidental, or consequential damages of any character arising as a
result of this License or out of the use or inability to use the
Work (including but not limited to damages for loss of goodwill,
work stoppage, computer failure or malfunction, or any and all
other commercial damages or losses), even if such Contributor
has been advised of the possibility of such damages.

9. Accepting Warranty or Additional Liability. While redistributing
the Work or Derivative Works thereof, You may choose to offer,
and charge a fee for, acceptance of support, warranty, indemnity,
or other liability obligations and/or rights consistent with this
License. However, in accepting such obligations, You may act only
on Your own behalf and on Your sole responsibility, not on behalf
of any other Contributor, and only if You agree to indemnify,
defend, and hold each Contributor harmless for any liability
incurred by, or claims asserted against, such Contributor by reason
of your accepting any such warranty or additional liability.

END OF TERMS AND CONDITIONS

Copyright (c) 2026 Corsair

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
47 changes: 47 additions & 0 deletions third_party/corsair/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,47 @@
# Corsair

Use the apps you've connected in [Corsair](https://corsair.dev) (Gmail, Slack, GitHub, Linear, Notion, and about 400 more) from your agent: search synced data, read apps live, make changes, and set up automations that run on a schedule or when an app sends an event.

The plugin adds the Corsair MCP server and four skills:

| Skill | Covers |
| --- | --- |
| `corsair-connect-apps` | Finding an app, handing over its sign-in link, and confirming the connection |
| `corsair-data` | When to search synced data, read an app live, or make a change |
| `corsair-automations` | Building automations from plain English or exact steps, then checking their runs |
| `corsair-approvals` | Permission modes, and what to do when an action needs approval |

## Install

1. Install the **Corsair** plugin from the Cursor marketplace.
2. The first time Cursor connects, sign in to Corsair with OAuth and approve the connection.
3. Connect each app you want to use once on Corsair (the agent can hand you the sign-in link).

To add the server manually instead, put this in your MCP config:

```json
{
"mcpServers": {
"corsair": {
"type": "http",
"url": "https://mcp.corsair.dev/mcp"
}
}
}
```

## Try it

- "What apps do I have connected in Corsair?"
- "List open issues in my repo on GitHub."
- "Every Friday at 5pm, post new GitHub issues to Slack."

## Support

Source: [corsairdev/agent-plugins](https://github.com/corsairdev/agent-plugins). Questions or problems: [[email protected]](mailto:[email protected]).

[Privacy policy](https://corsair.dev/privacy-policy) · [Terms](https://corsair.dev/terms-of-service)

## License

Apache-2.0
Binary file added third_party/corsair/assets/logo.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
8 changes: 8 additions & 0 deletions third_party/corsair/mcp.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
{
"mcpServers": {
"corsair": {
"type": "http",
"url": "https://mcp.corsair.dev/mcp"
}
}
}
45 changes: 45 additions & 0 deletions third_party/corsair/skills/corsair-approvals/SKILL.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,45 @@
---
name: corsair-approvals
description: Use when a Corsair call or automation run says it needs approval, was denied, timed out waiting for approval, or is blocked by a permission mode, or when the user asks what Corsair's permission modes allow.
---

# Approvals and permission modes

Every action has a risk level: read, write, or destructive. The Corsair connection this agent uses, a link or a client sign-in, has a mode, and the mode decides which risk levels go through, which wait for a person to approve them, and which are refused.

| Mode (as Corsair labels it) | Reads | Writes | Destructive |
| --- | --- | --- | --- |
| Read (`readonly`) | allowed | refused | refused |
| Cautious (`cautious`, the default) | allowed | allowed | need approval |
| Strict (`strict`) | allowed | need approval | refused |
| Open (`open`) | allowed | allowed | allowed |

You can't change the mode. Whoever manages the connection sets it in Corsair.

No tool reports this connection's mode, so don't guess it. Work from what you can see: no `add_triggers` tool usually means the link is Read, no `add_integrations` tool means it can't add apps, and a "blocked by permission mode" error names the mode. Otherwise explain the four modes and say the link's settings in Corsair show which one applies.

Your client may also ask the user to confirm each `run_script` call, because the tool can make changes. `read_data` is marked read-only, so clients usually run it without asking. Those prompts come from the client, not from Corsair, and are separate from everything below.

## What you'll see and what to do

**"Approval required. Visit <link> to approve or deny, then tell the agent to retry this action."**

1. Give the user the link exactly as returned and say in plain words what the action does ("delete the repo acme/old-site").
2. Stop and wait. Don't retry on a timer, and don't look for another way to get the same result.
3. When the user says they approved it, call that one action again with exactly the arguments from the first call: copy them, don't recompute them. Leave out any other changes the first script already made, so they don't happen twice. An approval covers that one call, once. Different arguments need a new approval.

**"... was denied by the user. Await further instructions before proceeding."**
Stop. Tell the user it was denied and ask what they'd like instead. Don't retry.

**"... timed out waiting for approval."**
The request expired. Ask whether to request it again. If yes, run the call again to get a new link.

**"... is blocked by permission mode 'readonly'"** (or `'strict'`)
This connection can't do that kind of action at all. Tell the user which action was blocked and that whoever manages the connection can change its mode in Corsair. Don't look for a workaround.

**"... requires user approval before it can run"** with no link
Corsair couldn't create an approval link. Tell the user what it said and stop.

## Automations

A run that `list_runs` shows as "needs approval before it can run" is held before any step runs, because the automation needs approval or one of its steps is destructive. Call `get_run` to see what it would do, and tell the user. It's approved or denied in Corsair, not from here. Don't run its steps yourself with `run_script`.
Loading
Loading