[cursor]

Unreviewed third-party plugin submission. It was opened automatically from the submission form. Nobody has reviewed the plugin or tested its MCP server yet.

Submission

• Publisher handle: languals
• Company: Languals
• Contact: Équipe Languals contact@languals.fr
• Website: languals.fr
• plugin_url: https://languals.fr/mcp (remote MCP server, streamable HTTP)
• Upstream repo: https://github.com/assoujojo82-coder/languals-mcp
• Listing targets: Grok, Grok Bot, Cursor

Changes

• third_party/languals/mcp.json: the languals HTTP server at https://languals.fr/mcp
• third_party/languals/.cursor-plugin/plugin.json: category integrations, "mcpServers": "./mcp.json"
• third_party/languals/README.md and LICENSE (MIT, copied from the upstream repo)
• One row in the root README plugins table
• One entry in .cursor-plugin/marketplace.json. .claude-plugin/marketplace.json is unchanged.

Logo

The logo is not committed. Every fetch of languals.fr failed with a TLS reset from the build environment, including https://languals.fr/languals-logo.png (the submitted logo_url), /favicon.ico, and www.languals.fr. The favicon service was blocked too. There is no Languals GitHub organization. The only related account, assoujojo82-coder, is the founder's personal profile with an unrelated avatar, so I didn't use it. For now plugin.json logo points to the best URL found, the submitted https://languals.fr/languals-logo.png. Before merging, replace it with a local assets/logo.png.

Testing instructions (from submitter)

Add https://languals.fr/mcp (streamable HTTP). Public tools need no key, e.g. ask: "Correct this English sentence: Yesterday I go to the cinema and we was happy." Account tools trigger OAuth 2.1 (PKCE, dynamic client registration): create an account at https://languals.fr/register or sign in with Google, then click Autoriser. tools/list works without credentials. Repo: github.com/assoujojo82-coder/languals-mcp

Validation

node scripts/validate-plugins.mjs → All plugins validated successfully.

  

---

Note

Medium Risk
Unreviewed third-party plugin that routes agent traffic to an external MCP endpoint and OAuth for account-linked tutor data; behavior depends on Languals’ hosted server rather than in-repo code.

Overview
Adds a new Languals third-party integration so agents can use Languals’ hosted HTTP MCP server at https://languals.fr/mcp.

The change is mostly marketplace wiring: a new third_party/languals/ package with plugin.json, mcp.json, README, and MIT license, plus listing entries in .cursor-plugin/marketplace.json and the root README plugins table. Public tutor tools (CEFR estimates, grammar correction, translation) need no credentials; signed-in features use OAuth 2.1 when the user first calls an account tool. The manifest logo still points at a remote URL because no local asset was committed yet.

^{Reviewed by Cursor Bugbot for commit 2e78988. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Grok Bot connect path omitted
  • Added "placement": "server" to the Languals HTTP MCP config and the matching README snippet so Grok Bot dials the hosted path and shows the OAuth connect card.

Or push these changes by commenting:

@cursor push 6436f50341

Preview (6436f50341)

diff --git a/third_party/languals/README.md b/third_party/languals/README.md
--- a/third_party/languals/README.md
+++ b/third_party/languals/README.md
@@ -19,7 +19,8 @@
   "mcpServers": {
     "languals": {
       "type": "http",
-      "url": "https://languals.fr/mcp"
+      "url": "https://languals.fr/mcp",
+      "placement": "server"
     }
   }
 }

diff --git a/third_party/languals/mcp.json b/third_party/languals/mcp.json
--- a/third_party/languals/mcp.json
+++ b/third_party/languals/mcp.json
@@ -2,7 +2,8 @@
   "mcpServers": {
     "languals": {
       "type": "http",
-      "url": "https://languals.fr/mcp"
+      "url": "https://languals.fr/mcp",
+      "placement": "server"
     }
   }
 }

_{You can send follow-ups to the cloud agent here.}

^{Reviewed by Cursor Bugbot for commit 2e78988. Configure here.}

[cursor]

Grok Bot connect path omitted

Medium Severity · Logic Bug

The languals HTTP server omits placement server. On Grok Bot that leaves the plugin row UNDECIDED, so the connect and OAuth sign-in card never appear and account tools cannot be authorized, even though Grok Bot is a listing target.

Additional Locations (1)

• third_party/languals/README.md#L19-L23

 

^{Reviewed by Cursor Bugbot for commit 2e78988. Configure here.}