Hey, thanks for the detailed report. This is a confirmed bug. Sub-agents don’t inherit the user’s API keys and always get billed through the Cursor plan. We’ve seen similar behavior with custom OpenAI base URLs, same pattern: Sub-agents are not using custom OpenAI base URLs.
I’ve passed this to the team and we have the request ID. No timeline yet, but your report helps us prioritize, especially the details about the two scenarios (blocking when the plan runs out, plus silent quota usage).
Let me know if you have any questions.