Attenza
Attenza integrations
The small public integration kit for Attenza. It contains only the client-side pieces needed to connect agents to Attenza: a CLI, one agent skill, one portable plugin manifest, and focused setup notes.
The Attenza application, API implementation, database, deployment, and infrastructure remain in a separate private repository.
Integration status
Integration | Available now | Currently tested | Next step |
Cursor remote MCP |
| OAuth and MCP contract tested by Attenza; repository validation | Complete a real Cursor intervention round trip |
Cursor Agent Plugin | Root | Manifest structure and CI checks | Install locally, verify skill discovery, then submit to the marketplace |
GrokBot custom connector | Shared OAuth endpoint works without a private URL | OAuth, tool discovery, intervention creation, human decision, and result retrieval tested end to end | Retain as the direct integration path |
GrokBot plugin | The portable Agent Plugin adds polling and expiry behavior to the same MCP endpoint | Package validation; raw MCP round trip tested | Publish through the Cursor marketplace and verify catalog installation |
Attenza CLI | Browser OAuth, create, get, wait, cancel, and token refresh | Six unit tests, clean wheel build, and isolated install | Complete one interactive OAuth and intervention smoke test |
We are intentionally taking integrations one at a time. Other agent platforms are out of scope until Cursor and GrokBot are working end to end.
What every folder is for
Path | Why it exists |
Cursor-specific setup and testing notes | |
GrokBot publication status and next steps | |
The single canonical instruction set that teaches an agent when to pause and how to resume | |
The dependency-free | |
Synthetic intervention payloads for testing | |
The public JSON shape accepted by the CLI | |
Repository boundary, manifest, and secret-leak checks | |
CLI unit tests; they do not contact a live account |
At the repository root, plugin.json, mcp.json, and skills/ together are the portable Agent Plugin used by Cursor and GrokBot. Keeping them at the root means there is no second copied plugin tree and no duplicated skill. .github, mise.toml, pyproject.toml, and the policy files are ordinary public-repository maintenance files.
Public endpoint
OAuth-capable MCP clients connect to:
https://staging.attenza.io/mcpThe client discovers Attenza OAuth, opens sign-in and consent, and receives revocable user-scoped access. Do not publish API keys, OAuth tokens, authorization codes, or legacy capability URLs.
CLI
uv tool install git+https://github.com/maxhillaert/attenza-integrations.git
attenza login
attenza create examples/release-approval.json
attenza wait TASK_IDThe CLI stores its OAuth tokens only in the user's local configuration directory. Run attenza logout locally and revoke the connection in Attenza when it is no longer required.
Develop
mise install
mise run checkSee CONTRIBUTING.md and SECURITY.md before contributing.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/maxhillaert/attenza-integrations'
If you have feedback or need assistance with the MCP directory API, please join our Discord server