Enterprise
Cursor Cloud Agents: Capabilities
Each Cursor cloud agent runs in its own isolated VM with a full desktop, so it can use a mouse, keyboard, and browser to run the software it builds before opening a PR. It produces artifacts like screenshots, videos, and log references that attach to the PR, lets you take over the remote desktop, connects MCP servers configured for your team, and on Teams it automatically tries to fix CI failures in PRs it creates.
On this page
What can a Cursor cloud agent do?
Each cloud agent runs in its own isolated VM with a full desktop environment, so it can use a mouse and keyboard to control the desktop and browser the way a human developer would. That means it can start a dev server, open the app in a browser, click through UI flows, and verify a change works before it pushes a pull request.
Because the agent drives a real desktop, it checks its own work against the running app rather than guessing from the diff. Cursor describes this in its agent computer-use announcement post.
How do cloud agents show their work?
Agents create artifacts such as screenshots, videos, and log references to demonstrate what they did, and those artifacts attach to the pull request. The point is that you can validate a change from the PR itself without checking out the branch locally.
You can also opt in to embed artifacts directly into GitHub pull request descriptions. Enable the Allow posting artifacts to GitHub setting in the Cloud AgentsAgents that run in a Cursor-managed virtual machine, check out the repo, do the work and open a pull request, then shut down, with no load on your laptop. dashboard to turn this on.
GitHub's image proxy requires public URLs, so artifacts embedded in PR descriptions use long, unguessable URLs that are viewable without authentication. Cursor notes that GitHub itself used public URLs for all issue and PR attachments until May 2023.
Can I take control of the agent's machine?
Yes. You can take control of the agent's remote desktop to interact with the software it is building, then hand control back to the agent at any time to let it keep working.
Cloud agents run in a remote VM that can be onboarded with your repo, dependencies, tooling, and setup scripts. Because that VM mirrors your environment, you can test changes directly in it instead of checking out the branch on your local machine.
How do cloud agents use MCP servers?
Cloud agents can use MCPModel Context Protocol. A standard that lets an AI agent pull in context from outside the repo, like Jira tickets or internal docs. (Model Context Protocol) servers configured for your team, which gives them access to external tools and data sources such as databases, APIs, and third-party services during a run. Add and enable servers through the MCP dropdown at cursor.com/agents. Cloud agents support OAuth for servers that need it, and OAuth is per-user, including for servers shared at the team level.
You can add custom MCPModel Context Protocol. A standard that lets an AI agent pull in context from outside the repo, like Jira tickets or internal docs. servers using either HTTP or stdio transport; SSE and mcp-remote are not supported. MCP configurations are encrypted at rest, and the sensitive fields below are redacted after saving and cannot be read back by any user.
- env
- Environment variables for stdio servers.
- headers
- Request headers for HTTP servers.
- CLIENT_SECRET
- OAuth client secret for HTTP servers.
Cursor recommends HTTP over stdio. The table below contrasts where each transport runs and what credentials the agent's VM can reach, which is the deciding factor for most teams.
- Transport
- HTTP (recommended)
- Where it runs
- Tool calls are proxied through the backend; server config is never in the VM
- Credential exposure
- The agent has no access to refresh tokens, headers, or other credentials
- Transport
- stdio
- Where it runs
- The server runs inside the cloud agent's VM, like stdio MCPs in the Cursor IDE
- Credential exposure
- The agent has access to the server's configuration and environment variables
| Transport | Where it runs | Credential exposure |
|---|---|---|
| HTTP (recommended) | Tool calls are proxied through the backend; server config is never in the VM | The agent has no access to refresh tokens, headers, or other credentials |
| stdio | The server runs inside the cloud agent's VM, like stdio MCPs in the Cursor IDE | The agent has access to the server's configuration and environment variables |
Stdio servers depend on the VM environment, and Cursor cannot verify a stdio server will run until an agent launches; configure your environment setup correctly if you use them.
How do cloud agents fix CI failures?
Cloud agents automatically try to fix CI failures in pull requests they create. This currently supports GitHub Actions only, and automatic fixing is available on Teams today, with support for non-Teams accounts described as coming soon.
The automatic follow-up is deliberately conservative. An agent skips an auto-fix in any of the cases below, so it does not act on top of your changes or loop indefinitely.
- You pushed a new commit to the branch; agents do not auto-fix CI failures on human commits.
- You sent a follow-up message to the agent.
- The same check is already failing on the base commit of the PR.
- The PR has already had 10 CI-failure follow-ups.
You can disable this on all your personal cloud agents under Cursor Dashboard → Cloud AgentsAgents that run in a Cursor-managed virtual machine, check out the repo, do the work and open a pull request, then shut down, with no load on your laptop. → My Settings by turning off Automatically fix CI Failures. To control it per PR, comment @cursor autofix off to disable it and @cursor autofix on to re-enable it. You can also ask an agent to fix CI directly by tagging it in a comment, for example @cursor please fix the CI failures.
Frequently asked questions
Does a Cursor cloud agent really run a full desktop?
Yes. Each cloud agent runs in its own isolated VM with a full desktop environment and can use a mouse, keyboard, and browser, so it can start a dev server, click through UI flows, and verify a change before opening a PR.
Should I use HTTP or stdio for a cloud agent's MCP server?
Cursor recommends HTTP. With HTTP, tool calls are proxied through the backend and the server config is never present in the agent's VM, so the agent cannot reach tokens, headers, or other credentials. Stdio servers run inside the VM and expose their configuration and environment variables to the agent.
Why didn't my cloud agent auto-fix a failing CI check?
Auto-fix supports GitHub Actions only and is available on Teams today. Agents also skip the auto-fix if you pushed a new commit, sent a follow-up message, the check was already failing on the PR's base commit, or the PR has had 10 CI-failure follow-ups.
Sources & last verified
- Cursor - Cloud Agent Capabilities
- Cursor - Agent computer use (blog)
- Cursor - MCP
- Cursor - Cloud agent setup
Cursor ships frequently. Facts verified against primary sources on June 26, 2026.