[cursor]

Draft: unreviewed third-party plugin submission. Do not merge until someone has reviewed it.

Adds third_party/scriptmasterlabs/, a remote MCP plugin for B20 Truth by ScriptMasterLabs.

Submission

• Publisher handle: scriptmasterlabs
• Company: ScriptMasterLabs
• Contact: Timothy Walton, tim@scriptmasterlabs.com
• Website: https://scriptmasterlabs.com
• plugin_url (remote MCP server, used exactly as submitted): https://b20.scriptmasterlabs.com/mcp
• Listing targets: Grok, Grok Bot, Cursor
• Description: B20 Truth MCP: verified data and fact checks for Base-chain token claims.

Testing instructions (from the submitter)

Connect any MCP client to https://b20.scriptmasterlabs.com/mcp, initialize, call tools/list, then call a free read tool to confirm live data.

Changes

• third_party/scriptmasterlabs/mcp.json: scriptmasterlabs server, type: http, the submitted URL.
• .cursor-plugin/plugin.json with "mcpServers": "./mcp.json", category integrations (same layout as PitchBook in Add PitchBook third-party MCP plugin #796).
• README with install steps and the MCP block, CHANGELOG, MIT LICENSE.
• One entry in .cursor-plugin/marketplace.json and one row in the root README table. .claude-plugin/marketplace.json is unchanged.

Conflict with other ScriptMasterLabs submissions
At least 11 other open PRs from this publisher (#1074, #1076–#1081, #1083–#1086) also write to third_party/scriptmasterlabs/, so they will conflict on every file there. I named this plugin scriptmasterlabs-b20-truth so the marketplace name stays unique, but a reviewer needs to give each product its own folder (for example third_party/scriptmasterlabs-b20-truth/) before more than one can merge.

Logo: not downloaded
No image could be fetched, so no image file is committed. plugin.json logo is set to the submitted URL https://scriptmasterlabs.com/apple-touch-icon.png (best URL found; precedent #922).

• The submitted logo_url, https://scriptmasterlabs.com/favicon.ico, https://b20.scriptmasterlabs.com/favicon.ico, and the Google, DuckDuckGo, and icon.horse favicon services all failed with a TLS error from the build VM.
• No GitHub org or user exists for the publisher (scriptmasterlabs, ScriptMasterLabs, Timwal78 return 404).

A reviewer should download the logo into assets/logo.png and point logo at it.

Review notes

• I couldn't reach the MCP server from the build VM (TLS error), so the server and its tools are unverified.
• The tool list in the README is based on the submitted description, not on a live tools/list call.

Validation

• node scripts/validate-plugins.mjs: all plugins validated successfully.

  

---

Note

Medium Risk
Introduces an unreviewed third-party HTTP MCP dependency; agents may rely on its crypto/token outputs without local validation or auth in the plugin config.

Overview
Adds B20 Truth (scriptmasterlabs-b20-truth) as a new third-party integration that wires Cursor agents to ScriptMasterLabs’ hosted HTTP MCP at https://b20.scriptmasterlabs.com/mcp for Base-chain token lookups and claim fact-checking.

The change is mostly marketplace packaging: new third_party/scriptmasterlabs/ with plugin.json, mcp.json, README, CHANGELOG, and MIT LICENSE, plus listing entries in .cursor-plugin/marketplace.json and the root README plugins table. No API key or OAuth is configured in the plugin manifest.

Reviewers should note the shared third_party/scriptmasterlabs/ path may conflict with other open ScriptMasterLabs submissions, and the remote MCP endpoint was not verified in CI (per the PR description).

^{Reviewed by Cursor Bugbot for commit d38db83. Bugbot is set up for automated code reviews on this repo. Configure here.}