vercel / vercel/vercel-plugin

Cursor/Grok Bot MCP OAuth: vercel.com/authorize returns 404 for mcp.vercel.com client

Open
#141 0 comments 4 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
287
Forks
58
Avg merge
1d 1h
Merged PRs (30d)
17

Description

Summary

Connecting the Vercel Cursor plugin’s MCP connector (https://mcp.vercel.com) from Grok Bot / Cursor fails: the OAuth consent URL loads a 404 Not Found page on vercel.com/authorize while the user is already signed in.

Environment

  • Client: Cursor Grok Bot (MCP connector install of the Vercel plugin)
  • Plugin: Vercel (Cursor marketplace plugin bundling this repo + MCP)
  • Account: signed into Vercel as andy@illumin8.ca
  • Date: 2026-08-12

Steps to reproduce

  1. Install the Vercel Cursor plugin / MCP connector.
  2. Start connector authentication (connect card → OAuth).
  3. Browser opens (or is redirected to) a https://vercel.com/authorize?... URL for MCP resource https://mcp.vercel.com/.
  4. Page shows Vercel chrome with 404 / Not Found, “You are logged in as …”, and “Sign in as a different user”.
  5. Retrying with force_reauth and a fresh connect card still lands on authorize 404.

Example authorize URL shape

(redacted challenge/state values; structure preserved)

https://vercel.com/authorize
  ?response_type=code
  &client_id=cl_eD921KDq5R4BhfW5pRKJ6KHgY7d0JycM
  &code_challenge=…
  &code_challenge_method=S256
  &redirect_uri=http://localhost:8787/callback
  &scope=openid
  &resource=https://mcp.vercel.com/
  &state=…

Expected

Consent screen for Vercel MCP, then redirect to the client callback so the connector becomes connected.

Actual

vercel.com/authorize itself 404s before consent. Connector remains needsAuth. Localhost callback never runs because authorization never completes.

Notes

  • Other connectors (Notion, Google Calendar/Drive, GitHub) connected successfully in the same client.
  • Switching Vercel accounts / teams was attempted; authorize page still 404’d.
  • Workaround: abandoning MCP OAuth and using Vercel CLI + API token instead.
  • Happy to provide screenshots or additional client logs if useful.

Ask

Is this a broken/allowlisted OAuth client for Cursor, a Vercel MCP authorize routing bug, or a known account/team gating issue? Guidance on the supported auth path for this plugin’s MCP connector would help.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The payload names no source file or test. Start by reproducing the MCP connector OAuth flow and inspecting the generated vercel.com/authorize URL; done means establishing whether the plugin or Vercel authorization endpoint owns the 404 and documenting the supported authentication path.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
api, authentication
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.