finance: pre-connect disclosure in the listing description (1.1.1)

[minupalaniappan]

Adds a pre-connect disclosure to the Finance plugin's listing description so Grok Bot's plugin page tells users what connecting does and what data is shared before they link a bank, in the spirit of the custom copy on the 1Password page.

What changed (third_party/finance, 1.1.0 → 1.1.1)

• plugin.json description now covers: linking through Plaid, the data shared (contact details, account and balance info, transactions, credit and loans, investments — mirroring Plaid's own consent text), read-only access, that xAI never sees or stores bank logins, and that accounts can be unlinked from cursor.com.
• README intro and "About this connector" bullets carry the same statements; CHANGELOG has a 1.1.1 entry.
• No mcp.json, minClientVersions, or logo changes. This reaches Grok Bot desktop and mobile on the next marketplace re-index with no client release.

Verification

• node scripts/validate-plugins.mjs passes.
• The Grok Bot detail header renders description in full; in the browse list it truncates to the first sentence, so the "what connecting does" sentence leads.

---

Note

Low Risk
Documentation and marketplace metadata only; no connector, auth, or client behavior changes.

Overview
Bumps the Finance plugin to 1.1.1 and replaces the short marketplace/listing blurb with a pre-connect disclosure so users see what linking does before they connect accounts.

The new copy (in plugin.json, .cursor-plugin/marketplace.json, and the README intro) explains Plaid linking, which data categories are shared, that Grok syncs/stores linked account data for the connector while privacy mode still governs chat storage/training, read-only access, that bank logins are not stored by xAI, and unlinking via cursor.com. The README About this connector section adds matching bullets for data shared, sync, and unlinking. CHANGELOG documents 1.1.1 as disclosure-only—no MCP, minClientVersions, or runtime changes.

^{Reviewed by Cursor Bugbot for commit 00a4158. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

Autofix Details

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Marketplace listing copy is stale
  • Copied the 1.1.1 Plaid disclosure from finance plugin.json into the matching marketplace.json entry so catalog listings stay in sync.

Or push these changes by commenting:

@cursor push 8f6c02bee5

Preview (8f6c02bee5)

diff --git a/.cursor-plugin/marketplace.json b/.cursor-plugin/marketplace.json
--- a/.cursor-plugin/marketplace.json
+++ b/.cursor-plugin/marketplace.json
@@ -361,7 +361,7 @@
     {
       "name": "finance",
       "source": "third_party/finance",
-      "description": "Securely connect your accounts so Grok can help with questions about your spending, subscriptions, balances, and investments.",
+      "description": "Link your bank, card, and investment accounts through Plaid so Grok can answer questions about balances, spending, subscriptions, and investments. You'll share contact details, account and balance info, transactions, credit and loans, and investments. Access is read-only, xAI never sees or stores your bank login, and you can unlink accounts anytime from cursor.com.",
       "minClientVersions": {
         "cursor": "never",
         "grokbot": "0.49.0",

_{You can send follow-ups to the cloud agent here.}

[cursor]

Marketplace listing copy is stale

Medium Severity · Bugbot Rules

The new pre-connect description lives only in plugin.json. The Finance entry in .cursor-plugin/marketplace.json still has the old short blurb, so marketplace listings stay on the 1.1.0 copy after re-index. validate-plugins.mjs only compares name, so this mismatch still passes CI.

 

^{Triggered by learned rule: Plugin listing copy must match plugin.json and marketplace.json}

^{Reviewed by Cursor Bugbot for commit 243a4ef. Configure here.}

[minupalaniappan]

resolved

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Listing copy not synced
  • Updated the finance entry in marketplace.json so its description matches the Plaid, data-share, sync, and privacy-mode disclosure already in plugin.json.

Or push these changes by commenting:

@cursor push 5b3a5820c8

Preview (5b3a5820c8)

diff --git a/.cursor-plugin/marketplace.json b/.cursor-plugin/marketplace.json
--- a/.cursor-plugin/marketplace.json
+++ b/.cursor-plugin/marketplace.json
@@ -361,7 +361,7 @@
     {
       "name": "finance",
       "source": "third_party/finance",
-      "description": "Securely connect your accounts so Grok can help with questions about your spending, subscriptions, balances, and investments.",
+      "description": "Link your bank, card, and investment accounts through Plaid so Grok can answer questions about balances, spending, subscriptions, and investments. You'll share contact details, account and balance info, transactions, credit and loans, and investments. Grok syncs and stores your linked account data so the connector can work, and Grok Bot's privacy mode still controls whether your conversations are stored or used for training. Access is read-only, xAI never sees or stores your bank login, and you can unlink accounts anytime from cursor.com.",
       "minClientVersions": {
         "cursor": "never",
         "grokbot": "0.49.0",

_{You can send follow-ups to the cloud agent here.}

^{Reviewed by Cursor Bugbot for commit cdc46b3. Configure here.}