What changed
Cursor builds the app, creates a Postgres database if needed, puts authentication behind Cursor SSO and hosts it on a domain you choose. Before anything goes live, automated and agent-based checks look for problems such as secrets in app files, and you still have to publish explicitly. Team admins can see every app and secret, add review rules, approve blocked publishes and unpublish any app. It’s on all paid plans with cloud agents and deploys from Cursor Origin or GitHub, with GitLab listed as coming soon.
Who it affects
Paid Cursor users with cloud agents, and admins responsible for internal tools.
What to do
Team admins should add organisation-specific review rules before people start publishing internal apps.