Repository navigation
[gusto] Add Gusto plugin - #690
Merged
Merged
Conversation
liam-ilan
marked this pull request as ready for review
October 16, 2026 23:11
liam-ilan
force-pushed
the
liam-ilan/gusto
branch
from
October 16, 2026 23:24
ae08123 to
369321e
Compare
Add Gusto plugin
Gusto has a hosted MCP server at
https://mcp.api.gusto.com/, but there is no plugin for it yet.Changes
gustoplugin inthird_party/gusto/. It only needs the server address. Users sign in with their Gusto account, so there is no key to set up..cursor-plugin/marketplace.jsonand the main README table.Notes
initializeworks without sign-in,tools/listreturns401, and sign-in metadata athttps://mcp.api.gusto.comlists client self-registration and PKCE.http:andhttps:inform-action, so local return addresses should not be blocked.node scripts/validate-plugins.mjspasses.assets/logo.png. Gusto only publishes a wide wordmark and 32×32 icons.Note
Low Risk
Repository change is a standard third-party plugin listing and MCP config; user-facing risk is sensitive payroll/HR data via Gusto OAuth, mitigated by documented approval and auto-run guidance.
Overview
Adds a new Gusto Cursor integration plugin so agents can use Gusto’s hosted MCP server for payroll, employees, contractors, time off, and reports.
The plugin is a thin wrapper:
mcp.jsonpoints athttps://mcp.api.gusto.com/with HTTP transport; auth is OAuth (dynamic client registration + PKCE) with no local API keys. It is registered in.cursor-plugin/marketplace.jsonand the root README integrations table, with plugin manifest, README, CHANGELOG, and MIT LICENSE underthird_party/gusto/. The README calls out admin-only access, scope-limited data, and caution around mutating tools (e.g. running payroll).Note:
plugin.jsonreferencesassets/logo.png, which the PR description says is not included yet.Reviewed by Cursor Bugbot for commit 61e15b5. Bugbot is set up for automated code reviews on this repo. Configure here.