Skip to content

[Draft] Add Nuvemshop plugin - #942

Draft
cursor[bot] wants to merge 1 commit into
mainfrom
add-nuvemshop-plugin
Draft

cursor[bot] wants to merge 1 commit into
mainfrom
add-nuvemshop-plugin

Conversation

@cursor

@cursor cursor Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Unreviewed plugin submission. Nobody has reviewed this yet. Do not merge until someone has checked the server and the listing.

Adds third_party/nuvemshop, a remote MCP plugin for Nuvemshop's hosted server. This is the Brazilian (Portuguese) counterpart of the Tiendanube submission in #941, from the same contact.

Submission

Changes

  • third_party/nuvemshop/mcp.json: nuvemshop http server at https://admin-mcp.nuvemshop.com.br/mcp, copied exactly from the submission.
  • third_party/nuvemshop/.cursor-plugin/plugin.json with category integrations, "mcpServers": "./mcp.json" and "logo": "assets/logo.png". This follows the PitchBook layout from Add PitchBook third-party MCP plugin #796.
  • A README, CHANGELOG and LICENSE, one entry appended to .cursor-plugin/marketplace.json, and one row in the root README integrations table. .claude-plugin/marketplace.json is unchanged.

Logo
I couldn't download the submitted logo_url (an App Store icon on is1-ssl.mzstatic.com, https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/81/32/67/813267f3-4ef1-90ab-1ac4-37472fabdbed/AppIcon-0-0-1x_U007epad-0-1-85-220.png/512x512bb.png) because the TLS handshake failed from the build VM. www.nuvemshop.com.br and its favicon failed the same way. The NuvemShop GitHub org exists but is empty, unverified and was created in Aug 2026, so I didn't use it. Instead I committed the avatar of the parent TiendaNube GitHub organization (256×256 PNG, blog https://www.tiendanube.com, official SDK repos). It is the shared Tiendanube/Nuvemshop symbol, the same file used in #941. The org is not GitHub-verified, so please confirm with the publisher whether a Nuvemshop-specific icon should replace it.

Testing instructions (as submitted)

Use a Nuvemshop test store. Add https://admin-mcp.nuvemshop.com.br/mcp in Grok Bot, complete OAuth, then request up to 3 products with prices and stock. Compare results with the store admin; perform read-only checks. Tiendanube passed OAuth and list_products in Grok Bot. Nuvemshop authentication is pending and remains unvalidated.

Notes for reviewers

  • The submitter says Nuvemshop OAuth has not been validated yet; only the Tiendanube endpoint was tested.
  • The MCP endpoint could not be reached from the build VM (TLS failure), so I did not check OAuth or tool discovery here.
  • The server exposes write tools (prices, inventory, coupons). Only reads are part of the test plan.
  • author.email is on tiendanube.com, the parent company's domain.
  • node scripts/validate-plugins.mjs passes.
Open in Web View Automation 

Note

Medium Risk
New third-party remote MCP with OAuth and potential store write operations; endpoint and auth are not yet validated per the PR description.

Overview
Adds a new Nuvemshop third-party integration plugin so Cursor can connect to Nuvemshop’s hosted MCP server for Brazilian ecommerce stores.

The change introduces third_party/nuvemshop with manifest (plugin.json), mcp.json pointing at https://admin-mcp.nuvemshop.com.br/mcp (HTTP + OAuth, one store per connection), and standard docs/LICENSE/CHANGELOG. It registers the plugin in .cursor-plugin/marketplace.json and the root README integrations table.

This is an unreviewed publisher submission (draft): the PR notes Nuvemshop OAuth and the endpoint were not validated in CI, while the hosted server may expose write tools (inventory, prices, coupons) under the authorizing user’s store permissions.

Reviewed by Cursor Bugbot for commit f071546. Bugbot is set up for automated code reviews on this repo. Configure here.

Co-authored-by: Danny Jiang <djiang-jq@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant