What the marketplace really sells
The cursor/plugins repository presents itself as a plugin marketplace, but its deeper contribution is a way to make agent capability selectable, composable, and inspectable. The question at the end of this series is therefore not whether the repository contains useful tools. It is what kind of confidence the marketplace can create when a capability moves from a catalog entry to an agent action and then, sometimes, to an effect in another system.
The answer is bounded composability. A plugin gives a capability a name and a place. Its manifest gives the unit a declared shape. Skills, rules, agents, and hooks make intended behavior visible. MCP configuration connects that behavior to a local process or remote provider. Lifecycle state shows how work continues or stops. Verification and human review determine whether a result deserves to be accepted. Each layer adds capability, but each layer also adds a boundary that must remain legible.
This is more demanding than a directory of prompts and more modest than a guarantee of safe autonomy. The repository can make many relationships explicit. It cannot turn a provider’s changing API into a permanent contract, make a broad credential narrow, or ensure that an agent follows a prose rule in every runtime. Its value lies in making the route from capability to effect easier to inspect and easier to question.
The marketplace sells a bounded unit of agency
The repository’s marketplace manifest indexes a large and varied set of plugins. Some are workflow systems. Some are productivity or developer tools. Many connect to external services. The count of entries and categories is useful orientation, but it is not the main product. A catalog can be large without being understandable. The important fact is that each unit is expected to have an identifiable source and a per-plugin manifest that describes what it contributes.
That packaging decision changes the unit of agency. The agent does not receive an undifferentiated expansion of powers. It receives a unit with a declared surface. A workflow plugin can add a way to plan, review, delegate, or remember. An integration can add a path to data or an operation in another service. A plugin can combine those capabilities, but the manifest and components give a reader somewhere to locate the combination.
The contract layer is the first control. The marketplace entry connects a name to a source. The plugin manifest identifies the unit and declares its components, variables, connections, and client visibility. Schemas constrain the shape. The validator checks that source directories, manifests, names, and versions align. Pull-request CI keeps the repository’s own records and generated artifacts from silently diverging.
Those checks do not decide whether a plugin is wise. They remove a narrower class of uncertainty. A reader can ask whether the source exists, whether the manifest parses, whether the advertised component is discoverable, and whether the marketplace and plugin refer to the same unit. That is a better starting point than asking an agent to infer the repository’s structure from a README or a directory listing.
The component model then adds behavioral boundaries. A skill is a reusable procedure. A rule routes a request or places a condition around a tool. An agent owns a delegated role. A hook reacts to a lifecycle event and persists state. An MCP declaration exposes a connection boundary. The distinction keeps influence attached to responsibility. If a loop continues too long, inspect its hook and state. If a request reaches the wrong capability, inspect its rule. If a remote operation fails, inspect its connection, identity, and provider.
The result is not one kind of plugin. It is one packaging model for different kinds of agency. That is why pstack, Orchestrate, Advisor, Ralph Loop, Google Docs, Shopify, GitHub, and finance connectors can coexist without becoming one application. They share the marketplace and manifest boundaries while exposing different failure surfaces and different action effects.