Security, compliance, and observability for Cursor — powered by Unbound.
Unbound monitors every AI-driven action in Cursor in real time — shell commands, MCP tool calls, file reads and edits, user prompts, and assistant responses. It enforces the policies and guardrails you configure in the Unbound dashboard, and streams full session data for analytics and audit.
Key capabilities:
- Command policy — block or allow shell and MCP tool executions based on custom rules
- Prompt guardrails — DLP (PII detection), NSFW filtering, and jailbreak detection on user prompts
- Audit trail — every AI action is logged locally and sent to your Unbound dashboard
- Session analytics — full conversation exchanges streamed on session end
- Fail-open design — if the API is unreachable or the key is missing, Cursor continues normally
From Cursor Marketplace
Search for Unbound in Settings > Plugins, or visit cursor.com/marketplace.
From source
git clone https://github.com/websentry-ai/cursor-extension.git
cd cursor-extension
./install.shThe installer opens your browser automatically. Sign in to your Unbound account and the API key is saved to your shell profile.
Or run the setup skill inside Cursor:
/unbound-setup
After setup, try these in Cursor:
- Ask the AI to run
ls— check your Unbound dashboard for the event - Create a BLOCK rule in the dashboard, then ask the AI to run that command — it should be blocked
- Enable DLP guardrails, then type a prompt containing a fake SSN — it should be blocked
| Event | When it fires | What Unbound does |
|---|---|---|
| Shell command | Before execution | Checks against your command policies |
| MCP tool call | Before execution | Checks against your tool policies |
| User prompt | Before submission | Runs DLP, NSFW, and jailbreak guardrails |
| File read | Before read | Logs to audit trail |
| File edit | After edit | Logs to audit trail |
| Shell output | After execution | Logs to audit trail |
| MCP result | After execution | Logs to audit trail |
| Agent response | After response | Captures for session analytics |
| Session end | On stop | Sends full exchange to dashboard |
All checks happen in real time. Blocked actions show an explanation to the user.
The only required configuration is your API key:
| Variable | Description |
|---|---|
UNBOUND_CURSOR_API_KEY |
Your Unbound API key. Get one at app.getunbound.ai > Settings > API Keys |
The installer and /unbound-setup skill handle this automatically. The key is saved to your shell profile (~/.zprofile, ~/.bashrc, etc.) and picked up by Cursor on launch.
For fleet-wide enforcement where users cannot disable the plugin:
- MDM — deploy hooks to the system-wide Cursor path and provision API keys per device
- Team Marketplace — import this repo in your Cursor Team Dashboard and mark as "required"
See enterprise/README.md for detailed instructions.
./uninstall.shOr remove the plugin from Cursor's Settings > Plugins panel.
- Dashboard: app.getunbound.ai
- Documentation: docs.getunbound.ai
- Issues: github.com/websentry-ai/cursor-extension/issues