How to Connect Sorare to Cursor — via MCP

Self-hosted only. Sorare refuses requests from datacenter IP addresses, and AnythingMCP Cloud runs in a datacenter, so this connector is not available on AnythingMCP Cloud. It works on an AnythingMCP instance you run yourself on a computer or server with a regular home or office internet connection.

Connect Sorare to Cursor

Sorare is the largest NFT fantasy football game, with full GraphQL coverage over cards, players, lineups, and the transfer market. With AnythingMCP, you can drive all of it from Cursor in plain English — no SDK to glue, no token rotation to babysit.

What you can do

• "Show my current Sorare account and rare-card count."
• "List the next 5 Messi rare cards on auction under 0.05 ETH."
• "Find all my cards for Real Madrid players."
• "Who scored highest in So5 lineup abc-123?"

🔒 The video is embedded via the two-click consent pattern — nothing reaches Google until you press Play.

Prerequisites

• An active Sorare account (we recommend a dedicated, 2FA-disabled read-only account for headless use).
• AnythingMCP running on your own computer or server (Docker, about 3 minutes). AnythingMCP Cloud cannot run the Sorare connector.
• Cursor installed.

Step 1 — Get your Sorare access

1. Sign in to https://sorare.com.
2. Optionally disable 2FA on a read-only account dedicated to MCP — signIn rejects requests without a fresh OTP, and OTPs can't be pre-rotated for a server.

Step 2 — Install the Sorare adapter

curl -fsSL https://raw.githubusercontent.com/HelpCode-ai/anythingmcp/main/docker-compose.quickstart.yml -o docker-compose.yml
printf 'JWT_SECRET=%s\nENCRYPTION_KEY=%s\n' "$(openssl rand -hex 32)" "$(openssl rand -hex 32)" > .env
docker compose up -d

Open http://localhost:3000/connectors/store, click Sorare, and fill in:

Click Install — the adapter is now in your catalog with 19 tools (5 GraphQL builtins + 14 dedicated).

Under MCP Servers, create a server and assign the Sorare connector to it. On the server's page, copy the MCP endpoint (http://localhost:4000/mcp/<server-id>) and generate a key under API keys.

The quickstart listens on localhost only. For an instance that other people or cloud-based AI clients can reach, clone the repository and run ./setup.sh, which sets up a domain, HTTPS and OAuth (deployment guide).

Step 3 — Add the connector in Cursor

Cursor runs on your computer, so it can use the local endpoint. Add the server to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project):

{
  "mcpServers": {
    "sorare": {
      "url": "http://localhost:4000/mcp/<server-id>",
      "headers": { "X-API-Key": "<your-api-key>" }
    }
  }
}

Then check in Cursor's MCP settings that the server is enabled and its tools are listed.

Available tools (19 total)

Beyond the 19 tools — your AI calls any Sorare GraphQL operation

These dedicated tools cover the most common entry points, but every GraphQL connector also ships with sorare_graphql_schema, sorare_graphql_query, sorare_graphql_mutation and sorare_graphql_subscription — auto-injected escape hatches that let your AI compose any operation Sorare's schema supports.

That's the difference between a fixed tool list and a real agent. Ask:

"Find 3 Limited cards that are likely to score next gameweek and are 30 %+ under their 30-day average. Top 5 leagues only."

…and your AI walks the Sorare GraphQL schema, scans topPerformers, joins with liveSingleSaleOffers for floor prices, cross-references tokenPrices for 30-day averages, and hands you a buy list with a reserve plan. All from one prompt, no manual GraphQL on your part.

👉 See a full chat session in the Sorare launch announcement — a real Claude roundtrip composing a €100 buy strategy on its own.

Token rotation, explained

Sorare JWTs last ~30 days. AnythingMCP caches yours encrypted at rest, re-issues it 24 h before expiry, and re-logs in on any 401 (without your password ever being read again from disk — the bcrypt hash is recomputed from the freshly fetched salt). You never see an expired-token error.

FAQ

Does AnythingMCP store my plain Sorare password? Only inside the encrypted authConfig blob (AES-256-GCM). Only the bcrypt hash crosses the wire, only on signIn.

Can I use a Sorare account with 2FA? The signIn mutation needs a fresh otpAttempt for 2FA accounts, which can't be automated. Use a dedicated read-only account without 2FA.

Why isn't Sorare available on AnythingMCP Cloud? Sorare refuses requests from datacenter IP addresses. AnythingMCP Cloud runs in a datacenter, so every call would fail. An AnythingMCP instance on a home or office connection usually works.

Does Cursor support custom MCP servers on the free tier? Yes — MCP is available on Hobby, Pro and Business plans.

Next steps

• Connector landing page
• Connect to Claude
• Connect to ChatGPT
• Connect to Gemini
• Connect to Meta Muse