Feature request for product/service
API Keys
Describe the request
Cursor SDK already supports browser-based authentication (Cursor.auth.login()) and charging SDK usage to a user’s Cursor plan.
However, it would be great to support a dedicated OAuth authorization flow for third-party web applications, similar to OpenAI’s Sign in with ChatGPT.
Ideally:
- Users sign in with Cursor and authorize an external application to consume their existing Cursor plan allowance.
- Developers use Cursor SDK / Agent SDK on behalf of authorized users without collecting long-lived API keys.
- Users can review, limit, and revoke each application’s access and usage.
This would make it much easier to build secure, multi-user web applications powered by Cursor agents while allowing users to bring their existing subscriptions.
Related discussion: Public API/SDK to integrate Cursor chat models into third-party apps