Thanks for the incredibly thorough report — your root cause analysis and evidence are spot on.
We’ve confirmed the entitlement gap you identified. The Cursor Helper (Plugin) process is indeed missing the Apple Events automation entitlement, which means macOS can’t persist TCC approvals for any child process it spawns (like MCP servers that interact with Xcode). The generic Electron bundle ID compounds the issue.
This is a known issue class that also affects other workflows involving Apple Events from Cursor — this earlier thread and this one report the same underlying gap from different angles.
Our team is aware and this needs a packaging-level fix. Unfortunately there’s no user-side workaround for the repeated prompts — clicking “Allow” each time is the only option until the fix ships. We’ll follow up here when there’s progress.