[cursor]

Unreviewed submission. This PR was generated from a plugin submission form and has not been reviewed. Keep it as a draft until someone has checked the server, the publisher, and the logo. Do not merge as-is.

Submission

• Publisher handle: scriptmasterlabs
• Company: ScriptMasterLabs
• Contact: Timothy Walton, tim@scriptmasterlabs.com
• Website: https://scriptmasterlabs.com
• plugin_url: https://squeezeos-api.onrender.com/mcp/x402-pay (remote MCP server, used exactly as submitted)
• Submitted logo_url: https://scriptmasterlabs.com/apple-touch-icon.png
• Description: x402 payment execution MCP: lets agents make and verify per-call USDC payments.
• Listing targets: Grok, Grok Bot, Cursor

Testing instructions (from the submitter)

Connect any MCP client to https://squeezeos-api.onrender.com/mcp/x402-pay, initialize, call tools/list, then call a free read tool to confirm live data.

I couldn't run these. The build VM's network allowlist blocks onrender.com, so the server was not exercised. Reviewers should note this server executes real USDC payments; check what wallet/funds it spends before approving.

Changes

• third_party/scriptmasterlabs/mcp.json: a scriptmasterlabs HTTP server pointing at the submitted URL.
• third_party/scriptmasterlabs/.cursor-plugin/plugin.json: display name "x402 Pay", category integrations, "mcpServers": "./mcp.json", "logo": "assets/logo.png". Same layout as PitchBook in Add PitchBook third-party MCP plugin #796.
• README with install steps and the same MCP JSON block, plus a CHANGELOG and an MIT LICENSE. The form didn't state a license, so this uses the repo default.
• One row in the root README integrations table and one entry appended to .cursor-plugin/marketplace.json. .claude-plugin/marketplace.json is unchanged.

Logo

The submitted logo_url failed with a TLS error from the build VM because scriptmasterlabs.com is not on the allowlist. There is no scriptmasterlabs GitHub org. The committed assets/logo.png (a 180×180 PNG) is apple-touch-icon.png from the publisher's site repository, which describes itself as the production source of scriptmasterlabs.com: https://gitlab.com/timothy.walton45/sml-portfolio/-/raw/main/apple-touch-icon.png. A reviewer should confirm it matches the submitted logo_url.

Conflicts with other ScriptMasterLabs submissions

The same publisher submitted many plugins at once (for example #1074, #1076, #1079, #1084, #1086, #1087, #1089). They all use third_party/scriptmasterlabs/ and the plugin name scriptmasterlabs, so at most one can merge as written. If more than one is accepted, each needs its own directory and name (for example scriptmasterlabs-x402-pay).

Validation

node scripts/validate-plugins.mjs reports "All plugins validated successfully."

  

---

Note

High Risk
Introduces a remote MCP connector advertised for real USDC payment execution; the hosted server was not exercised in CI and wallet/spend behavior needs manual review.

Overview
Adds a new marketplace integration x402 Pay (scriptmasterlabs) so agents can make and verify per-call USDC payments over x402 via a hosted HTTP MCP server.

The PR introduces third_party/scriptmasterlabs/ with plugin.json (display name x402 Pay, mcpServers → ./mcp.json), mcp.json pointing at https://squeezeos-api.onrender.com/mcp/x402-pay, plus README, CHANGELOG, and MIT LICENSE. It also registers the plugin in .cursor-plugin/marketplace.json and adds a row to the root README integrations table.

Tool names and behavior live on the remote server; this repo only wires Cursor to that endpoint. Reviewers should treat this as an unreviewed submission: validate the publisher, logo, and especially what the MCP tools can spend before merge.

^{Reviewed by Cursor Bugbot for commit 04e6c51. Bugbot is set up for automated code reviews on this repo. Configure here.}