Cursor IDE module

[bpmct]

A discussion dedicated to the Cursor IDE module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	23 / 25	20 / 20	N/A	8 / 10	85 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Two clear examples: default usage and opening in a specific directory. MCP configuration example demonstrates a major mode with sensible defaults.
Coder-context framing	8	5	Names Cursor IDE and mentions the Coder Remote VS Code Extension. Shows "Add a button to open any workspace" but lacks detail on where Coder fits in the flow or what the module adds on top of base Coder functionality.
Visual preview	5	0	No image, GIF, or video in README. Icon reference does not count.

IDE Integration — 23 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	Uses coder_app via the vscode-desktop-core module with proper launch behavior through cursor:// protocol.
Managed configuration	6	6	Documented MCP configuration via the mcp input variable with complete example showing JSON-encoded server config written to ~/.cursor/mcp.json.
Configurable folder or workdir	6	6	folder variable documented with example showing "/home/coder/project".
Pre-installed extensions	6	4	Not applicable for desktop IDE; criterion excluded per track definition. Scoring based on 19-point denominator.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs in the module itself. MCP example uses data.coder_external_auth.github.access_token which is handled by Coder's external auth resource, avoiding inline secrets.
Non-hardcoded auth path	4	4	README demonstrates OAuth via coder_external_auth resource for GitHub MCP server authentication, avoiding raw API keys.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only configures a coder_app and writes user-provided MCP config. No artifacts to mirror.
Bring-your-own binary	5	N/A	Module downloads nothing; assumes Cursor is already installed on user's machine (desktop IDE).
Egress transparency	3	N/A	Module makes no external network calls; only writes local config and creates Coder resources.
Runs without sudo	2	N/A	The coder_script for MCP writes to $HOME/.cursor/mcp.json with no sudo invocation. However, since download-related criteria are N/A, entire theme is N/A per construction.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	4	Variables have clear descriptions and sensible defaults (folder="", open_recent=false, order=null). Missing validation blocks for inputs like mcp (could validate JSON structure) and folder (path format).
Test coverage	4	4	Comprehensive TypeScript tests in main.test.ts cover URL generation with various input combinations, MCP file writing, and resource creation. Tests verify business logic thoroughly.

Overall — 85 / 100

Raw 68 / 80 → round(68 / 80 × 100) = 85

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.