Cursor

Anysphere · IDE

Approved Cleared up to Internal

AI-native code editor. Approved for Internal code with Privacy Mode enforced; agentic modes are reviewed separately.

Policy note: Privacy Mode must be ON (zero data retention) per policy. Business plan required.

Platforms

1 of 1 approved

Where Cursor can be accessed from — each route reviewed independently.

Direct vendor

Approved

Approved Conditional Under review Denied

How Cursor operates and what it can reach — each path approved independently.

2 of 4 approved

Each way of operating Cursor is reviewed independently.

Tab / Autocomplete

Inline code completions.

Approved

Ask

Chat about the codebase without editing.

Approved

Agent

Multi-file autonomous edits with tool use.

Approved with human review of every diff before commit; no auto-run of shell commands.

Conditional

Background Agents

Cloud agents that run autonomously on your repo.

Denied — code leaves the managed environment to Cursor's cloud.

Denied

1 of 4 approved

MCP servers and integrations Cursor can reach, each reviewed independently.

GitHub MCP MCP

Repository access via MCP.

Internal repos only.

Conditional

Postgres MCP MCP

Queries a Postgres database via MCP.

Under review

Linear MCP MCP

Issue tracking via MCP.

Approved

Custom internal MCP MCP

Team-built MCP servers.

Each custom server requires its own Security review.

Under review