origin-api SKILL.md skillA
origin-api from cursor/plugins is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add cursor/plugins/origin-api@git:20260930.0390402Pins git:20260930.0390402 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- cursor/plugins
- Path
origin-apps/skills/origin-api/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260930.0390402, committed Sep 30, 2026
- First version recorded
- Sep 28, 2026
- Size
- 2,773 bytes
- Repository stars
- 15,586
- License
- none declared
Routes questions about the Cursor Origin API to the right section of the Origin docs and names the few rules to check first. Use when a task mentions Origin, the Origin API, Origin Apps, or Origin webhooks, including creating an Origin App, authenticating as one, calling Origin endpoints, or handling Origin webhook deliveries.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Origin API The docs are the source of truth. Do not name an endpoint, scope, event slug, header, or limit from memory. Where this file and the docs disagree, the docs win. The docs live under `https://cursor.com/docs/api/origin/`. `llms.txt` is the index and links every section, endpoint, and webhook payload. `openapi.yaml` is the contract, and "Endpoint reference" explains its `x-origin-*` extensions. `llms-full.txt` is the whole reference in one file. `changelog` says what moved. For one question, start at `llms.txt` and fetch only the section that answers it. `llms-full.txt` and `openapi.yaml` are each several hundred kilobytes, too large to read into context whole. When you need all of them, as a porting brief does, save them locally if you can, outside any repository you are working in, search them for the section heading or annotation you need, and read only the matching part. Cite `operationId`s and section names. ## Rules to check first 1. **Native or mirror.** A repository is either native (created on Origin) or a GitHub mirror. On a native repository an installation has its full scopes and every write. On a GitHub mirror, every event except …
Read the whole file at its exact version.
How to install
mdr add cursor/plugins/origin-api@sha256:97c1d9475a3949d3The line at the top of this page pins the label git:20260930.0390402, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_hp3hqeiai2ggngfi)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Sep 28, 2026 and Sep 30, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260930.0390402 latest | 2026-09-30 | 0390402 | 2,773 B | A | view · diff |
| git:20260930.277537c | 2026-09-30 | 277537c | 2,937 B | A | view · diff |
| git:20260929.5dda504 | 2026-09-29 | 5dda504 | 3,682 B | A | view · diff |
| git:20260929.551b37a | 2026-09-29 | 551b37a | 3,642 B | A | view · diff |
| git:20260928.14989dd | 2026-09-28 | 14989dd | 3,608 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2773 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
cursor/plugins · 15,586 stars · license none declared · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_hp3hqeiai2ggngfi GET https://markdownregistry.com/api/v1/resolve?ref=cursor/plugins/origin-api GET https://markdownregistry.com/api/v1/blob/97c1d9475a3949d32f8455ac6cb1c935978c272873de8d04816350a5aab66709
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.