Patcherly official plugin for Cursor
# Patcherly MCP rules
- Never ask the user to paste OAuth tokens, HMAC secrets, or connector keys into chat.
- Destructive MCP tools (`delete_target`, `delete_error`, `force_disconnect`, etc.) require `confirm=true` in tool arguments — confirm with the user before calling.
- Prefer read tools (`list_errors`, `get_metrics_summary`) before write tools when triaging.
- MCP connects to the user's **frozen workspace** from consent — do not assume they can switch tenant via the agent.
- If a tool is missing from `tools/list`, treat it as out of scope for this session — do not invent platform-admin or cross-workspace actions.
- If Patcherly MCP tools fail with Unauthorized / auth errors, or the MCP panel shows Needs login / Logout after an interrupted OAuth attempt: tell the user to use **Authenticate / Connect / Login** (not Logout), complete consent once on the dashboard, and avoid starting a second OAuth flow from agent chat in parallel. Do not invent workarounds that paste tokens.