Cursor Integration

⚡ 5 min read

Install transcodes-guard for Cursor desktop (0.46+, Hooks enabled). Cloud agents are not wired for these hooks as of 2026-05. Node.js ≥ 20 in PATH. Get a MAT from Console — see AI Agent Overview.

Beta — the Cursor plugin is still in beta. For production, Claude Code or Codex are the stable supported hosts.

Install Transcodes (bigstrider) from the Cursor Marketplace only — Cursor wires hooks + MCP via ${CURSOR_PLUGIN_ROOT}. No git clone, no build, no install.sh for normal use.

Save your token


# macOS / Linux
curl -fsSL https://raw.githubusercontent.com/transcodings/transcodes-guard/prod/cli/install.sh | bash && transcodes install
# Windows (PowerShell):
# irm https://raw.githubusercontent.com/transcodings/transcodes-guard/prod/cli/install.ps1 | iex; transcodes install
# or: transcodes set <MAT> -l cursor

Install from the Marketplace

Individual / Pro — in the editor:

Run /add-plugin, or
Customize → Plugins → Marketplace (cursor.com/marketplace ) → install Transcodes (bigstrider)

Teams / Enterprise — an admin adds the team marketplace once (Dashboard → Settings → Plugins → Team Marketplaces → Add Marketplace, paste https://github.com/transcodings/transcodes-guard). Developers then install from Customize → Plugins.

Approve hook trust

First hook fire → one-time review via command palette → Cursor: Review Hooks.

Verify

Tools & MCP → transcodes-guard with tools enabled. Run a gated command — deny message should include a step-up URL on Transcodes Auth.

What you get

Hook	Role
`beforeShellExecution`	`POST /guard/evaluate` on shell commands
`beforeMCPExecution`	`POST /guard/evaluate` on external MCP wire names
`sessionStart`	Step-up protocol primer + carry-over state
`beforeSubmitPrompt`	Detects user “done” after MFA (side-effect consume)
`stop`	Reminds agent of dangling step-up; reaps orphan state

| MCP server transcodes-guard | Admin tools, poll_stepup_session_wait, diagnostics |

Slash command: /transcodes — prompt-driven control surface: admin MCP tools, simulate gating, step-up recovery, SDK integration via get_integration_guide.

After a deny

User completes MFA on the URL from the deny message.
Agent calls poll_stepup_session_wait with sid.
Retry the same blocked command on verified.

Never assume the blocked command ran. See Step-up Auth → MCP.

Manual install (advanced)

Only if you cannot use the Marketplace — forked repo or air-gapped workspace.


git clone https://github.com/transcodings/transcodes-guard.git
cd transcodes-guard
npm install && npm run build:plugin
./plugins/cursor/install.sh          # project scope
# or: ./plugins/cursor/install.sh --user

If .cursor/mcp.json already exists, install.sh does not overwrite it — add the transcodes-guard server entry manually.

Disable protection

Uninstall the plugin from Customize → Plugins, or remove manual hooks.json / mcp.json entries. There is no runtime kill-switch — disabling is human-only.

See also: Claude Code · Codex · Step-up Auth