Repository navigation
Add ChatGPT/Codex plugin for Paper's remote MCP server - #22
Merged
Merged
Conversation
New portable Agent Plugins package at plugins/paper pointing at https://mcp.paper.design with CIMD OAuth, listing metadata and review test cases under extensions.com.openai, plus a validator for the submission portal's limits and a pack script for the upload ZIP. Co-authored-by: Cursor <cursoragent@cursor.com>
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit ed6880d. Configure here.
Codex's portable mcp.json parser rejects servers with unknown keys, so the extensions["com.openai"].auth block from OpenAI's docs would have left Codex installs with no Paper tools. OAuth is discovered from the server (401 + resource_metadata) instead, and the validator now fails on any extra server keys. Co-authored-by: Cursor <cursoragent@cursor.com>
…e skills/ when present Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
New
plugins/paperpackage in the portable Agent Plugins format (rootplugin.json+mcp.json), pointing athttps://mcp.paper.designwith CIMD OAuth client registration (AuthKit advertises CIMD and DCR). It is a fresh, remote-only package;paper-desktopis untouched.plugins/paper/plugin.json: identity, listing metadata, starter prompts, and 5 positive / 3 negative review test cases underextensions.com.openai.supportURLanddemo_recording_urlare marked TODO; they block submission but not upload or local testing.plugins/paper/mcp.json:streamable-httpserver withauth.type: oauth,client.mode: cimd. No secrets.plugins/paper/assets/logo.png: 1024px PNG (the SVG's 39px viewBox fails the >= 48px rule)..agents/plugins/marketplace.json: second entry so the plugin installs from the local marketplace in ChatGPT desktop.scripts/validate-agent-plugins.mjs: validates against the vendored 1.0.0 schemas (schemas/agent-plugins/) and the portal's submission limits (field lengths, HTTPS listing URLs, icon dimensions, auth shape, noclientSecret/headers).validate-codex.mjsnow accepts a portable rootplugin.json.scripts/pack-chatgpt.ts/bun run pack:chatgpt: deterministicdist/paper-chatgpt-plugin.zipfor the portal; uploaded as a CI artifact.Server-side requirements (explicit tool annotations,
/.well-known/openai-apps-challenge) are in paper-design/paper#2659.Made with Cursor
Note
Medium Risk
Introduces a public-plugin submission surface and remote MCP dependency; mistakes in manifest validation or server URL could block listing or misroute users, but no secrets are packaged and
paper-desktopis unchanged.Reviewed by Cursor Bugbot for commit 3b3c2a6. Bugbot is set up for automated code reviews on this repo. Configure here.