# Sirro

[![Sirro MCP server](https://glama.ai/mcp/servers/Jonathanmberg/Sirro-open/badges/score.svg)](https://glama.ai/mcp/servers/Jonathanmberg/Sirro-open)

Cursor plugin for [Sirro](https://www.sirro.dev), a shared asset library for coding agents.

Install the plugin, Allow in the browser, then save and reuse named assets across projects. No API key is copied into Cursor.

## Install

1. Open **Cursor Settings → Plugins**.
2. Search for **Sirro**.
3. Click **Install**. Cursor connects to `https://www.sirro.dev/mcp` and opens Sirro so you can Allow.

Until this plugin is listed, load it locally:

```bash
git clone https://github.com/Jonathanmberg/sirro-cursor.git
ln -s "$(pwd)/sirro-cursor" ~/.cursor/plugins/local/sirro
```

Then run **Developer: Reload Window**. Remove any user-added Sirro MCP URL so Cursor uses this plugin instead of a generic MCP server.

## What it does

The plugin starts Sirro's hosted MCP server. After you Allow, Cursor can:

- Save code or a link as a named asset
- Fetch an asset by name
- List assets, kits, and recipes
- Open the Sirro dashboard

Workspace choice happens on Allow. Disconnect from the Sirro dashboard.

## Auth and data

- Transport: Streamable HTTP at `https://www.sirro.dev/mcp`
- Auth: Sirro OAuth (PKCE). Tokens stay in Cursor. This repo has no secrets and no `${VAR}` placeholders.
- Data: named assets you save into your Sirro workspace. Sirro does not receive your GitHub token or repo credentials through this plugin.

Existing `npx @sirro/mcp` installs that use a member API key are a separate door. This plugin does not use that path.

## Test the server

Unauthenticated calls to `/mcp` return `401` with OAuth discovery:

```bash
curl -sI https://www.sirro.dev/mcp
curl -s https://www.sirro.dev/.well-known/oauth-authorization-server
```

## Docs

- Product: https://www.sirro.dev
- Dashboard: https://www.sirro.dev/login
- Privacy: https://www.sirro.dev/privacy
- Terms: https://www.sirro.dev/terms

Logo is the Sirro mark on a white 1:1 plate.

## License

MIT