v0.6.0 Framework Integration

- 3 live MCP tools: updateItemWebhook, getLiabilities, verifyWebhookSignature
- Production skill: plaid-react-integration (usePlaidLink, PlaidContext, error boundaries, update mode)
- Production skill: plaid-nextjs-integration (App Router routes, server-only client, middleware auth, webhook handler, server actions)
- Re-tagged getTransferIntent and inspectAccessToken stubs to v0.7.0
- Version bumps across plugin.json, package.json, index.ts, README, CLAUDE, CHANGELOG, ROADMAP
- 454 tests passing

Made-with: Cursor

Author: TMHSDigital

.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "plaid-developer-tools",
   "displayName": "Plaid Developer Tools",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Plaid API integration for fintech developers using Cursor, Claude Code, and MCP-compatible editors. 17 skills covering Link setup, transaction sync, webhooks, sandbox testing, category mapping, error handling, API reference, institution search, account verification, investments, identity, recurring detection, migration, security, React integration, Next.js integration, and production readiness - plus 7 rules. Companion MCP server provides 30 tools for live Plaid sandbox interaction.",
   "author": {
     "name": "TMHSDigital",

CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to this project will be documented in this file.
 
+## [0.6.0] - 2026-04-02
+
+### Added
+
+- 3 live MCP tools: `plaid_updateItemWebhook`, `plaid_getLiabilities`, `plaid_verifyWebhookSignature`
+- Production skill: `plaid-react-integration` - usePlaidLink hook, PlaidContext provider, error boundaries, reconnection UI, TypeScript types
+- Production skill: `plaid-nextjs-integration` - App Router API routes, server-only Plaid client, middleware auth, webhook handler, server actions
+
+### Changed
+
+- Re-tagged 2 MCP tool stubs (`getTransferIntent`, `inspectAccessToken`) from v0.6.0 to v0.7.0
+- `plaid_verifyWebhookSignature` verifies body hash against JWT claims and fetches the verification key from Plaid
+- `plaid_getLiabilities` supports optional `account_ids` filter for scoping to specific liability accounts
+
 ## [0.5.0] - 2026-04-01
 
 ### Added

CLAUDE.md

@@ -4,7 +4,7 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## Project Overview
 
-The **Plaid Developer Tools** Cursor plugin is at **v0.5.0**. It accelerates Plaid integration work with **17 skills**, **7 rules**, and a companion MCP server exposing **30 tools** for Link, transactions, webhooks, sandbox flows, and API discovery. Skills encode workflows; rules enforce secrets handling, errors, webhook safety, sync cursor persistence, Link best practices, and token storage; the MCP server has 25 live tools (reference data, institutions, sandbox, Link tokens, accounts, balances, transactions, investments, identity, auth, item management) and 5 stubs for future releases.
+The **Plaid Developer Tools** Cursor plugin is at **v0.6.0**. It accelerates Plaid integration work with **17 skills**, **7 rules**, and a companion MCP server exposing **30 tools** for Link, transactions, webhooks, sandbox flows, and API discovery. Skills encode workflows; rules enforce secrets handling, errors, webhook safety, sync cursor persistence, Link best practices, and token storage; the MCP server has 28 live tools (reference data, institutions, sandbox, Link tokens, accounts, balances, transactions, investments, identity, auth, item management, liabilities, webhook verification) and 2 stubs for future releases.
 
 ## Plugin Architecture
 
@@ -33,8 +33,8 @@ mcp-server/                  - MCP server with 30 tools
 | plaid-recurring-detection | Recurring transaction streams, subscription detection, income recognition |
 | plaid-migration-guide | Migration from other aggregators (coming v0.7.0) |
 | plaid-security-best-practices | Token encryption, RLS, audit logging (coming v0.7.0) |
-| plaid-react-integration | React hooks and components (coming v0.6.0) |
-| plaid-nextjs-integration | Next.js App Router patterns (coming v0.6.0) |
+| plaid-react-integration | React hooks, context providers, error boundaries, update mode |
+| plaid-nextjs-integration | Next.js App Router routes, server actions, middleware auth, webhook handlers |
 | plaid-production-readiness | Production access checklist (coming v0.7.0) |
 
 ## Rules (7 total)

README.md

@@ -6,7 +6,7 @@
 
 **Cursor plugin and MCP companion for building on Plaid**
 
-[![Version](https://img.shields.io/badge/version-0.5.0-3B5CFF?style=for-the-badge&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0id2hpdGUiPjxwYXRoIGQ9Ik0xMiAyTDIyIDEyTDEyIDIyTDIgMTJaIi8+PC9zdmc+)](https://github.com/TMHSDigital/Plaid-Developer-Tools)
+[![Version](https://img.shields.io/badge/version-0.6.0-3B5CFF?style=for-the-badge&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0id2hpdGUiPjxwYXRoIGQ9Ik0xMiAyTDIyIDEyTDEyIDIyTDIgMTJaIi8+PC9zdmc+)](https://github.com/TMHSDigital/Plaid-Developer-Tools)
 [![License: CC BY-NC-ND 4.0](https://img.shields.io/badge/License-CC%20BY--NC--ND%204.0-lightgrey?style=for-the-badge)](https://creativecommons.org/licenses/by-nc-nd/4.0/)
 [![CI](https://img.shields.io/github/actions/workflow/status/TMHSDigital/Plaid-Developer-Tools/ci.yml?branch=main&label=CI&logo=githubactions&style=for-the-badge)](https://github.com/TMHSDigital/Plaid-Developer-Tools/actions/workflows/ci.yml)
 [![Validate](https://img.shields.io/github/actions/workflow/status/TMHSDigital/Plaid-Developer-Tools/validate.yml?branch=main&label=Validate&logo=githubactions&style=for-the-badge)](https://github.com/TMHSDigital/Plaid-Developer-Tools/actions/workflows/validate.yml)
@@ -22,7 +22,7 @@
 
 ## Overview
 
-Plaid Developer Tools is a **Cursor** plugin by **TMHSDigital** that packages agent skills, editor rules, and a TypeScript **MCP server** (`mcp-server/`) so you can design, debug, and ship Plaid integrations without leaving the IDE. Production coverage today is **v0.5.0** with twelve skills, seven rules, and twenty-five live MCP tools; the rest are staged stubs with version targets on the [roadmap](ROADMAP.md).
+Plaid Developer Tools is a **Cursor** plugin by **TMHSDigital** that packages agent skills, editor rules, and a TypeScript **MCP server** (`mcp-server/`) so you can design, debug, and ship Plaid integrations without leaving the IDE. Production coverage today is **v0.6.0** with fourteen skills, seven rules, and twenty-eight live MCP tools; the rest are staged stubs with version targets on the [roadmap](ROADMAP.md).
 
 <table>
 <tr>
@@ -34,7 +34,7 @@ Plaid Developer Tools is a **Cursor** plugin by **TMHSDigital** that packages ag
 | --- | --- |
 | **Skills** | Guided workflows: Link, `/transactions/sync`, webhooks, sandbox, categories, errors, and future topics |
 | **Rules** | Guardrails: `plaid-secrets`, `plaid-error-handling`, `plaid-env-safety`, and upcoming checks |
-| **MCP** | Thirty tools (25 live, 5 stubs) for institutions, items, balances, sync, investments, identity, webhooks, and more |
+| **MCP** | Thirty tools (28 live, 2 stubs) for institutions, items, balances, sync, investments, identity, webhooks, and more |
 
 </td>
 <td width="50%">
@@ -138,7 +138,7 @@ Ask the agent to follow **`plaid-webhook-handling`** when implementing webhook r
 
 ## Skills
 
-12 of 17 skills are production-ready. Names match the folder under `skills/`.
+14 of 17 skills are production-ready. Names match the folder under `skills/`.
 
 <details>
 <summary><strong>All 17 skills</strong></summary>
@@ -157,8 +157,8 @@ Ask the agent to follow **`plaid-webhook-handling`** when implementing webhook r
 | `plaid-investment-tracking` | :white_check_mark: Live | Holdings, securities, portfolio aggregation |
 | `plaid-identity-verification` | :white_check_mark: Live | KYC flows, identity data, match scoring |
 | `plaid-recurring-detection` | :white_check_mark: Live | Recurring transaction detection |
-| `plaid-react-integration` | :construction: v0.6.0 | React hooks and patterns |
-| `plaid-nextjs-integration` | :construction: v0.6.0 | Next.js App Router patterns |
+| `plaid-react-integration` | :white_check_mark: Live | React hooks, context, error boundaries |
+| `plaid-nextjs-integration` | :white_check_mark: Live | Next.js App Router, API routes, server actions |
 | `plaid-migration-guide` | :construction: v0.7.0 | Migrate from other aggregators |
 | `plaid-security-best-practices` | :construction: v0.7.0 | Token encryption, RLS, audit logging |
 | `plaid-production-readiness` | :construction: v0.7.0 | Production access checklist |
@@ -192,7 +192,7 @@ All 7 rules are production-ready.
 
 ## MCP tools
 
-30 tools total (25 live, 5 stubs). Build with `cd mcp-server && npm run build`.
+30 tools total (28 live, 2 stubs). Build with `cd mcp-server && npm run build`.
 
 <details>
 <summary><strong>Read-only (no auth) - 8 tools</strong></summary>
@@ -240,11 +240,11 @@ All 7 rules are production-ready.
 | `refreshTransactions` | :white_check_mark: | Refresh transactions |
 | `removeItem` | :white_check_mark: | Remove Item |
 | `getItemStatus` | :white_check_mark: | Item status |
-| `updateItemWebhook` | :construction: v0.6.0 | Update Item webhook URL |
-| `getLiabilities` | :construction: v0.6.0 | Liabilities |
-| `getTransferIntent` | :construction: v0.6.0 | Transfer intent |
-| `verifyWebhookSignature` | :construction: v0.6.0 | Verify webhook signature |
-| `inspectAccessToken` | :construction: v0.6.0 | Inspect token metadata (debug) |
+| `updateItemWebhook` | :white_check_mark: | Update Item webhook URL |
+| `getLiabilities` | :white_check_mark: | Liabilities |
+| `getTransferIntent` | :construction: v0.7.0 | Transfer intent |
+| `verifyWebhookSignature` | :white_check_mark: | Verify webhook signature |
+| `inspectAccessToken` | :construction: v0.7.0 | Inspect token metadata (debug) |
 
 </details>
 
@@ -285,8 +285,8 @@ Summary aligned with [ROADMAP.md](ROADMAP.md):
 | **v0.2.0** | Read-only MCP tools, `plaid-api-reference`, `plaid-institution-search`, `plaid-webhook-security` |
 | **v0.3.0** | Sandbox MCP tools, `plaid-sync-cursor`, `plaid-sandbox-testing` enhancements |
 | **v0.4.0** | Full API tools, `plaid-account-verification`, `plaid-investment-tracking`, `plaid-link-best-practices` |
-| **v0.5.0** (current) | Identity, recurring detection, `plaid-token-storage`, 5 advanced MCP tools |
-| **v0.6.0** | `plaid-react-integration`, `plaid-nextjs-integration` |
+| **v0.5.0** | Identity, recurring detection, `plaid-token-storage`, 5 advanced MCP tools |
+| **v0.6.0** (current) | `plaid-react-integration`, `plaid-nextjs-integration`, 3 MCP tools |
 | **v0.7.0** | `plaid-migration-guide`, `plaid-security-best-practices`, `plaid-production-readiness` |
 | **v1.0.0** | Full polish, 17 skills, 7 rules, 30 MCP tools stable |
 

ROADMAP.md

@@ -1,15 +1,15 @@
 # Roadmap
 
-**Current:** v0.5.0
+**Current:** v0.6.0
 
 | Version | Theme | Skills | Rules | MCP Tools | Highlights | Status |
 | --- | --- | --- | --- | --- | --- | --- |
 | v0.1.0 | Foundation | 6 | 3 | 0 | Core skills, secret/env/error rules, plugin scaffold, CI, docs | Done |
 | v0.2.0 | Live Data | +2 | +1 | 8 | MCP server read-only tools, API reference skill, institution search skill, webhook security rule | Done |
 | v0.3.0 | Sandbox Power | +0 (enhanced 1) | +1 | +6 | 6 sandbox MCP tools, sandbox testing enhancements, sync cursor rule | Done |
 | v0.4.0 | Full API | +2 | +1 | +6 | Account verification, investment tracking, link best practices rule | Done |
-| v0.5.0 (current) | Advanced | +2 | +1 | +5 | Identity verification, recurring detection, token storage rule | **Current** |
-| v0.6.0 | Framework Integration | +2 | 0 | +3 | React integration, Next.js integration, webhook tools | Planned |
+| v0.5.0 | Advanced | +2 | +1 | +5 | Identity verification, recurring detection, token storage rule | Done |
+| v0.6.0 (current) | Framework Integration | +2 | 0 | +3 | React integration, Next.js integration, webhook tools | **Current** |
 | v0.7.0 | Ship It | +2 | 0 | +2 | Migration guide, production readiness, utility tools | Planned |
 | v1.0.0 | Stable | 17 | 7 | 30 | Final polish, all docs, comprehensive test suite, npm publish | Planned |
 
@@ -39,3 +39,6 @@
 - [x] `plaid-recurring-detection` added in v0.5.0
 - [x] `plaid-token-storage` rule added in v0.5.0
 - [x] 5 advanced MCP tools implemented in v0.5.0 (sandboxSetVerificationStatus, simulateTransactions, refreshTransactions, removeItem, getItemStatus)
+- [x] `plaid-react-integration` added in v0.6.0
+- [x] `plaid-nextjs-integration` added in v0.6.0
+- [x] 3 framework MCP tools implemented in v0.6.0 (updateItemWebhook, getLiabilities, verifyWebhookSignature)

mcp-server/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@tmhs/plaid-mcp",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "MCP server for Plaid API integration - 30 tools for sandbox testing, transactions, accounts, institutions, categories, investments, identity, webhooks, and more.",
   "type": "module",
   "main": "dist/index.js",

mcp-server/package.json

@@ -36,7 +36,7 @@ import { register as registerInspectAccessToken } from "./tools/inspectAccessTok
 
 const server = new McpServer({
   name: "plaid-mcp",
-  version: "0.5.0",
+  version: "0.6.0",
 });
 
 registerListCategories(server);

mcp-server/src/index.ts

@@ -1,10 +1,14 @@
 import { z } from "zod";
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { stubResponse } from "../types.js";
+import { textResponse, errorResponse } from "../types.js";
+import { getPlaidClient } from "./utils.js";
 
 const inputSchema = {
   access_token: z.string().describe("Plaid access token for the item"),
-  account_ids: z.array(z.string()).optional().describe("Subset of liability account IDs"),
+  account_ids: z
+    .array(z.string())
+    .optional()
+    .describe("Subset of liability account IDs"),
 };
 
 export function register(server: McpServer): void {
@@ -13,7 +17,35 @@ export function register(server: McpServer): void {
     "Get liability accounts including credit cards, student loans, and mortgages",
     inputSchema,
     async (args) => {
-      return stubResponse("plaid_getLiabilities", "v0.6.0");
+      try {
+        const client = getPlaidClient();
+        const request: Record<string, unknown> = {
+          access_token: args.access_token,
+        };
+        if (args.account_ids?.length) {
+          request.options = { account_ids: args.account_ids };
+        }
+
+        const response = await client.liabilitiesGet(request as any);
+
+        return textResponse(
+          JSON.stringify(
+            {
+              accounts: response.data.accounts,
+              liabilities: {
+                credit: response.data.liabilities.credit,
+                mortgage: response.data.liabilities.mortgage,
+                student: response.data.liabilities.student,
+              },
+              request_id: response.data.request_id,
+            },
+            null,
+            2,
+          ),
+        );
+      } catch (error) {
+        return errorResponse(error);
+      }
     },
   );
 }

mcp-server/src/tools/getLiabilities.ts

@@ -15,7 +15,7 @@ export function register(server: McpServer): void {
     "Create a transfer intent for payment initiation",
     inputSchema,
     async (args) => {
-      return stubResponse("plaid_getTransferIntent", "v0.6.0");
+      return stubResponse("plaid_getTransferIntent", "v0.7.0");
     },
   );
 }