Cursor + AgentValet - Governed MCP for your AI code editor

Setup

One command. The CLI writes the config for you.

The AgentValet CLI signs you in via your browser, generates an RS256 keypair, registers your Cursor session as an agent, and writes .cursor/mcp.json for you. No copy-paste, no IDs to track.

terminal

# In your project directory
npx @agentvalet/register

# Browser opens. Sign in. Done.
# The CLI writes:
#   .cursor/mcp.json    - MCP entry, project-scoped

Run npx @agentvalet/register in your project directory.

Your browser opens to AgentValet. Sign in (or sign up - it's free). The CLI auto-completes registration when you authorize.

Add the server from Cursor's MCP settings (the exact menu path varies by version - check Cursor's docs if you don't see it). You should see agentvalet listed as connected.

In Agent mode, AgentValet tools appear automatically. Approve platforms in the dashboard and the agent picks them up live.

User-scoped install - prefer one config across every Cursor project? Run npx @agentvalet/register --scope user and the CLI writes to ~/.cursor/mcp.json instead of .cursor/mcp.json.

Prefer to wire it up by hand?

The CLI is the recommended path. If you'd rather edit the config yourself, here's the equivalent:

.cursor/mcp.json

{
  "mcpServers": {
    "agentvalet": {
      "command": "npx",
      "args": ["-y", "@agentvalet/register", "mcp-server"]
    }
  }
}

You'll still want to run npx @agentvalet/register once so the CLI can store your agent's private key on this machine - the MCP server reads it at startup.

What changes

Your coding agent, with governance

Cursor's agent can now call any platform through AgentValet without holding API keys locally. All calls are scoped, logged, and revocable from the dashboard.

No local secrets

API keys never touch your project directory or shell environment. Credentials are decrypted in-memory at call time inside the proxy.

Scoped per platform

Approve only the platforms and scopes your agent needs. GitHub read-only stays read-only - even if the agent tries to push.

Full audit trail

Every platform call is logged: which agent, which platform, which action, and when. Review it any time in the dashboard.

Instant revocation

Disable a platform or suspend the agent in one click. No config files to update, no key rotation to orchestrate.

Your Cursor agent can already edit any file. AgentValet decides what it can ship.

One command. The CLI writes the config for you.

Your coding agent, with governance

Ship governed Cursor in under 5 minutes.