[liam-ilan]

Add Databricks Genie One plugin

The backend support for Databricks Genie One is merged in everysphere (#1151088), but there is no plugin that teams can install.

Changes

• Add the databricks-genie-one plugin. It points at each team's own Databricks workspace: https://<workspace>/ai-gateway/mcp-services/system.ai.genie_one_mcp.
• A team admin enters the workspace hostname, the client ID, and an optional client secret. The field names match what the backend expects.
• Add a short README on setting up the Databricks app connection, plus the changelog, license, logo, marketplace entry, and main README row.

Notes

• node scripts/validate-plugins.mjs passes.
• The variable fields are the same as the backend's built-in ones, and the URL passes the backend's Genie One check.
• Sign-in has not been tried against a real Databricks workspace yet.
• The minimum Cursor version is 3.19.0, copied from Workday. It should probably be 3.28.0, because older desktop builds don't know Databricks sign-in must go through Cursor's servers.
• The README doesn't yet tell the Databricks admin to allow the ai-gateway scope on the app connection.

---

Note

Low Risk
Adds a new third-party plugin package and marketplace entries only; no changes to shared runtime or auth code in this repo.

Overview
Adds a new databricks-genie-one Cursor integration plugin so teams can install Genie One against their own Databricks workspace (companion to existing backend support).

The plugin registers an HTTP MCP server at https://${DATABRICKS_HOST}/ai-gateway/mcp-services/system.ai.genie_one_mcp with team-supplied OAuth (DATABRICKS_HOST, CLIENT_ID, optional CLIENT_SECRET) and scopes ai-gateway / offline_access, plus manifest variables, README team-setup docs, changelog, license, and marketplace + root README listings. Minimum Cursor version is set to 3.19.0 (same pattern as Workday).

^{Reviewed by Cursor Bugbot for commit fb4f183. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.

Bugbot Autofix prepared fixes for both issues found in the latest run.

• ✅ Fixed: Client version floor is too low
  • Raised minClientVersions.cursor from 3.19.0 to 3.28.0 so installs require the desktop that routes Databricks OAuth through Cursor's servers.
• ✅ Fixed: Optional secret interpolation can fail
  • Interpolated the optional CLIENT_SECRET as ${CLIENT_SECRET:-} in mcp.json and the README example so an omitted secret becomes empty for public-client auth.

Or push these changes by commenting:

@cursor push 520c1d7525

Preview (520c1d7525)

diff --git a/third_party/databricks-genie-one/.cursor-plugin/plugin.json b/third_party/databricks-genie-one/.cursor-plugin/plugin.json
--- a/third_party/databricks-genie-one/.cursor-plugin/plugin.json
+++ b/third_party/databricks-genie-one/.cursor-plugin/plugin.json
@@ -3,7 +3,7 @@
   "displayName": "Databricks Genie One",
   "version": "1.0.0",
   "minClientVersions": {
-    "cursor": "3.19.0"
+    "cursor": "3.28.0"
   },
   "description": "Ask Databricks Genie questions about your workspace's data in plain language.",
   "author": {

diff --git a/third_party/databricks-genie-one/README.md b/third_party/databricks-genie-one/README.md
--- a/third_party/databricks-genie-one/README.md
+++ b/third_party/databricks-genie-one/README.md
@@ -24,7 +24,7 @@
       "url": "https://${DATABRICKS_HOST}/ai-gateway/mcp-services/system.ai.genie_one_mcp",
       "auth": {
         "CLIENT_ID": "${CLIENT_ID}",
-        "CLIENT_SECRET": "${CLIENT_SECRET}",
+        "CLIENT_SECRET": "${CLIENT_SECRET:-}",
         "scopes": ["ai-gateway", "offline_access"]
       }
     }

diff --git a/third_party/databricks-genie-one/mcp.json b/third_party/databricks-genie-one/mcp.json
--- a/third_party/databricks-genie-one/mcp.json
+++ b/third_party/databricks-genie-one/mcp.json
@@ -5,7 +5,7 @@
       "url": "https://${DATABRICKS_HOST}/ai-gateway/mcp-services/system.ai.genie_one_mcp",
       "auth": {
         "CLIENT_ID": "${CLIENT_ID}",
-        "CLIENT_SECRET": "${CLIENT_SECRET}",
+        "CLIENT_SECRET": "${CLIENT_SECRET:-}",
         "scopes": ["ai-gateway", "offline_access"]
       }
     }

_{You can send follow-ups to the cloud agent here.}

^{Reviewed by Cursor Bugbot for commit 74f840e. Configure here.}

[cursor]

Client version floor is too low

High Severity · Logic Bug

minClientVersions.cursor is 3.19.0, copied from Workday, but Workday ships no mcp.json. This plugin publishes a workspace MCP URL, so older desktops run Databricks sign-in locally instead of through Cursor's servers and the connection fails.

 

^{Reviewed by Cursor Bugbot for commit 74f840e. Configure here.}