# Tensorbasis downloadable integration candidates

These source packages read saved account data; they are not marketplace listings, certified apps, or automatic account connections. No credentials are included. Importing/installing requires your review and native-client authentication. Keep tool approvals and least-privilege read scopes enabled. Skill instructions are not a security boundary.

- claude.zip: extract to a trusted directory and load its root with `claude --plugin-dir <directory>`. Includes native `.claude-plugin/plugin.json`, `.mcp.json` and two skills. No marketplace wrapper is included.
- openai.zip: portable Agent Plugins 1.0.0 package; root `plugin.json`, `mcp.json`, and auto-discovered skills. Local loading varies by OpenAI surface; public directory submission is separate.
- cursor.zip: portable Agent Plugins 1.0.0 candidate for clients supporting the standard. Review Cursor's current plugin setup documentation. No listing/submission or native acceptance is claimed.
- gemini.zip: extract, then `gemini extensions install <directory>` and inspect trust/auth prompts. Contains root `gemini-extension.json` and skills. No Antigravity claim.
- n8n.json: import through n8n's Import from File. Remains inactive; Manual Trigger only. Create an HTTP Header Auth credential named as you prefer with header Name `Authorization`, Value `Bearer <your read-only key>`, and select it on BOTH HTTP nodes. Requires account_summary and price_gaps scopes. Never paste a token into workflow JSON. Click Execute Workflow only after reviewing destination and scopes. Reads first 20 comparisons only; no refresh, actions or schedules. Review n8n execution retention/access controls; data can remain visible in the editor even with persistence disabled.
- zapier-source.zip: extract custom integration source. This is NOT an importable Zap template or published Zapier app. In a separate trusted directory, review the package, then install its pinned dependencies, run `npm run validate`, and use the Zapier Platform CLI's authenticated registration/push flow only when authorized. Authentication is a custom password field managed by Zapier; no tokens in code or Zap inputs. Two searches read account summary and first saved price-gap page; no polling/instant triggers, webhooks or writes. Running Zaps or hosting n8n may incur the user's existing platform charges; no plan change or execution is authorized by downloading.

All reads require an existing verified Tensorbasis account. MCP bundles point to https://app.tensorbasis.com/api/mcp and use native OAuth browser consent where supported. n8n/Zapier use a read-only key created on Tensorbasis Developers; auth does not carry over from MCP. The read-only OpenAPI 3.1 document is served at https://app.tensorbasis.com/api/integrations/openapi (requires deployment of the route). No actions or paid refresh operations are documented.

Bundled skills: price-gap-report and match-review produce reports/worksheets only, use bounded saved-data reads, treat store text as untrusted, and must not approve/reject, scrape, refresh suggestions, send messages, reprice or spend. Retain independent server scope enforcement. Saved observations may be stale, variant/currency coverage incomplete, and suggestion scores uncalibrated.

Validation is source/schema and mocked behavior only, not native installation/login, marketplace approval, or a live account connection. No Make blueprint is provided; use the documented HTTP API manually if needed. The canonical manifest specification is https://agent-plugins.org/plugin-authors/manifest and skill layout is https://agent-plugins.org/plugin-authors/skills. Native setup: https://cursor.com/docs/plugins, https://developers.openai.com/plugins, https://code.claude.com/docs/en/plugins, https://geminicli.com/docs/extensions/. Automation references: https://docs.n8n.io/integrations/builtin/credentials/httprequest/ and https://docs.zapier.com/integrations/build-cli/overview.