feat(third_party): add Reaudit MCP integration

[RoseSamaras]

Summary

Adds Reaudit as a third-party hosted MCP integration (https://mcp.reaudit.io/mcp), following the same OAuth-first HTTP pattern as Profound (no Bearer header in mcp.json; Cursor opens browser login on first connect).

• third_party/reaudit/: plugin.json, mcp.json, logo, README
• .cursor-plugin/marketplace.json: register reaudit (between readwise and similarweb)

Links

• MCP (streamable HTTP): https://mcp.reaudit.io/mcp
• Health: https://mcp.reaudit.io/health
• Docs: https://docs.reaudit.io
• Full plugin bundle (skills + commands): https://github.com/RoseSamaras/reaudit-ai-plugin
• Support: support@reaudit.io

Auth & testing

1. Install plugin locally or from this PR branch.
2. In Cursor → Tools & MCP, click Authenticate on the Reaudit server (OAuth).
3. Confirm tools load (health endpoint currently reports 238 tools).

Manual API key fallback is documented in third_party/reaudit/README.md only.

Review notes

• Addressed Cursor Bugbot feedback in 9318a1a (OAuth-first config).
• 2026-10-03: Rebased onto latest cursor/plugins main (~150 commits) and re-ran Bugbot.

Test plan

• Local install from ~/.cursor/plugins/local/reaudit/
• OAuth connect flow documented in README
• GET https://mcp.reaudit.io/health → status: ok
• Cursor team review + merge

---

Note

Low Risk
Documentation and marketplace registration only; no changes to core plugin runtime or shared auth infrastructure.

Overview
Adds Reaudit as a new third-party Cursor plugin that connects to the hosted MCP at https://mcp.reaudit.io/mcp, using the same OAuth-first HTTP setup as Profound (no API key in mcp.json).

Registers the plugin in .cursor-plugin/marketplace.json and the root README.md integrations table. New bundle under third_party/reaudit/ includes plugin.json, mcp.json, and a README covering OAuth, optional API-key fallback, and the tool surface (AI visibility, GTM, GEO content, social, paid intel).

^{Reviewed by Cursor Bugbot for commit 89eae90. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Stale Bugbot comment from a previous run.

[RoseSamaras]

Thanks Bugbot — addressed in 9318a1a.

Fix: Switched to OAuth-first config (same as Profound): plain http URL with no Bearer header or required variables block. Reaudit /mcp returns WWW-Authenticate with OAuth resource metadata; Cursor handles browser login on first connect.

API key paths documented in README as manual fallback only (Bearer on /mcp or apiKey query on /sse).

[RoseSamaras]

Hi Cursor plugins team — gentle follow-up on this third-party MCP listing.

Status: Ready for human review whenever you have bandwidth. Automated checks are green (Bugbot), and we addressed the earlier OAuth/Bearer feedback in 9318a1a.

What we did today (2026-10-03):

• Rebased feat/third-party-reaudit onto current main (branch had fallen ~150 commits behind).
• Refreshed the marketplace copy to match live server scale (/health → 238 tools).
• Confirmed mcp.json matches Profound: streamable HTTP URL only, OAuth via WWW-Authenticate on first connect.

Quick reviewer path:

1. Merge adds third_party/reaudit/ + one marketplace.json entry.
2. Smoke test: install → Authenticate on Reaudit → tools list loads.
3. Health check: https://mcp.reaudit.io/health

Happy to adjust naming, categories, or README length if anything doesn’t match marketplace guidelines. Thanks for maintaining this catalog.

— Rose / Reaudit (support@reaudit.io)

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{Bugbot Autofix is ON, but it could not run because the branch was deleted or merged before autofix could start.}

^{Reviewed by Cursor Bugbot for commit 0048164. Configure here.}

[RoseSamaras]

Addressed Bugbot README listing feedback in 89eae90 — added reaudit row to the root plugin table (between readwise and similarweb), description matches marketplace.json.