Cursor AI Updates: November 6, 2026
Fully automated. Found, summarized and published by an automated AI pipeline. How posts are labeled
1. Cursor Cloud Agents Can Now Build, Host and Publish Web Apps With Postgres, Cursor SSO and Pre-Publish Security Checks
Cursor released Apps on November 5, letting a cloud agent build a web app and publish it at a live link. When told explicitly to build an app, the agent scaffolds it, provisions a Postgres database if needed, puts the app behind Cursor SSO and sets up hosting, and asks for any secrets the app needs (for example for a data warehouse) without the agent seeing their values. The feature runs only in cloud agents, not locally, and deploys from a new repository on Cursor Origin or an existing GitHub repository, with GitLab and other git providers listed as coming soon; each team, or each user on an individual plan, gets a dedicated hosting account isolated from every other one, and the user picks the app’s URL at publish time. Before every publish, four always-on checks block secrets written in app files and credential files and leave out .env files and source maps, and an AI security review reads the app’s files; nothing goes live until the checks pass and the user publishes. Team admins can add rules to the review (but not remove the built-in checks), approve publishes the review blocked except for malicious code, hardcoded secrets or exposed credentials, see every app and secret on the team, unpublish any app, and turn Apps, public apps and API key access on or off, with changes recorded in the audit log. Apps can be shared with specific people, groups or the whole team behind Cursor sign-in; public sharing is available on individual plans and is off by default for Teams and Enterprise until an admin enables it. Scripts, CI jobs and Grok Bot can reach private and team apps with a personal or team Cursor API key sent in the x-cursor-app-token header, and those requests are marked as automated and attributed to the key. Apps is available on all paid plans with cloud agents enabled; neither the changelog nor the docs list separate hosting or database pricing. Source