[cursor]

Unreviewed submission. This PR was generated from a plugin submission form and has not been reviewed. Keep it as a draft until someone has checked the server, the publisher, and the logo. Do not merge as-is.

Submission

• Publisher handle: scriptmasterlabs
• Company: ScriptMasterLabs
• Contact: Timothy Walton, tim@scriptmasterlabs.com
• Website: https://scriptmasterlabs.com
• plugin_url: https://gatepay.onrender.com/mcp (remote MCP server, used exactly as submitted)
• Submitted logo_url: https://scriptmasterlabs.com/apple-touch-icon.png
• Description: GatePay is a payment-routing MCP for AI agents: policy-gated USDC payouts on Arc under hard caps, with free status, policy and quote tools.
• Listing targets: Grok, Grok Bot, Cursor

Testing instructions (from the submitter)

Connect any MCP client to https://gatepay.onrender.com/mcp, initialize, call tools/list, then call gatepay_status or gatepay_quote to confirm live responses.

I couldn't run these. The build VM's network allowlist blocks onrender.com (TLS connect failed), so the server was not exercised. Reviewers should note this server routes real USDC payouts; check what wallet/funds it spends and how the caps are enforced before approving.

Changes

• third_party/scriptmasterlabs/mcp.json: a scriptmasterlabs HTTP server pointing at the submitted URL.
• third_party/scriptmasterlabs/.cursor-plugin/plugin.json: display name "GatePay", category integrations, "mcpServers": "./mcp.json", "logo": "assets/logo.png". Same layout as PitchBook in Add PitchBook third-party MCP plugin #796.
• README with install steps and the same MCP JSON block, plus a CHANGELOG and an MIT LICENSE. The form didn't state a license, so this uses the repo default.
• One row in the root README integrations table and one entry appended to .cursor-plugin/marketplace.json. .claude-plugin/marketplace.json is unchanged.

Logo

The submitted logo_url failed with a TLS error from the build VM because scriptmasterlabs.com is not on the allowlist. There is no scriptmasterlabs GitHub org. The committed assets/logo.png (a 180×180 PNG) is apple-touch-icon.png from the publisher's site repository, which describes itself as the production source of scriptmasterlabs.com: https://gitlab.com/timothy.walton45/sml-portfolio/-/raw/main/apple-touch-icon.png. A reviewer should confirm it matches the submitted logo_url.

Conflicts with other ScriptMasterLabs submissions

The same publisher submitted many plugins at once (for example #1074, #1076, #1079, #1084, #1086, #1089, #1090, #1091). They all use third_party/scriptmasterlabs/ and the plugin name scriptmasterlabs, so at most one can merge as written. If more than one is accepted, each needs its own directory and name (for example scriptmasterlabs-gatepay).

Validation

node scripts/validate-plugins.mjs reports "All plugins validated successfully."

  

---

Note

High Risk
The plugin exposes agents to a third-party hosted MCP that advertises real USDC payout routing; marketplace listing increases blast radius without in-repo auth or server verification in this diff.

Overview
Adds GatePay as a new third-party integration (scriptmasterlabs) in the Cursor plugin marketplace.

The PR registers the plugin in .cursor-plugin/marketplace.json and the root README integrations table, and introduces third_party/scriptmasterlabs/ with manifest (displayName GatePay), mcp.json wiring an HTTP MCP server to https://gatepay.onrender.com/mcp, plus README, CHANGELOG, and MIT LICENSE. Tool behavior lives on the hosted server (policy-gated USDC payouts on Arc, with status/policy/quote tools per the listing copy).

This is an unreviewed submission-style change: reviewers still need to validate the remote MCP endpoint, publisher/logo, and payout/cap enforcement before merge.

^{Reviewed by Cursor Bugbot for commit 101a55b. Bugbot is set up for automated code reviews on this repo. Configure here.}