Cursor

Fit

Cursor is a strong current fit for SecureMCP-Lite.

Cursor documents MCP support with mcp.json, including stdio-based local servers.

Recommended setup

Create either:

• ~/.cursor/mcp.json
• .cursor/mcp.json

Example:

{
  "mcpServers": {
    "repo-guard": {
      "command": "npx",
      "args": [
        "securemcp-lite",
        "start",
        "--target",
        "npx -y @modelcontextprotocol/server-filesystem .",
        "--target-cwd",
        "/absolute/path/to/project",
        "--config",
        "/absolute/path/to/project/secure-mcp.yml"
      ]
    }
  }
}

See also:

• ../../examples/cursor.mcp.jsonFile

Rollout steps

1. save secure-mcp.yml in the repo
2. add the repo-guard entry to .cursor/mcp.json or ~/.cursor/mcp.json
3. restart or refresh MCP servers in Cursor
4. verify allowed and blocked behavior

Suggested rollout

• keep the config project-local first
• commit the YAML policy
• document the expected tools in AGENTS.md or repo docs

What to test first

• ask Cursor to read a file inside the repo
• ask Cursor to inspect a directory inside the repo
• attempt a path traversal or non-allowlisted tool

Expected result:

• normal read-only work still works
• risky calls are blocked before they reach the target

Documentation source

• Cursor MCP docs: https://docs.cursor.com/advanced/model-context-protocolExternal