Cursor

Overview

Use Cursor credentials to make authenticated API calls through Alter Vault without exposing API keys in code.

Property	Value
Provider ID	cursor
Category	Developer Tools
Credential Type	Base64 Credentials

Step 1: Get Credentials

Open the Cursor Dashboard

Sign in to the Cursor Dashboard as an organization admin. Admin API keys require a paid Cursor team plan (not Free/Pro).

Open Settings → Advanced

Open the Settings tab, then the Advanced sub-section.

Create an Admin API key

Under Cursor Admin API Keys, click Create New API Key.

Copy the key

Copy the generated key — it starts with crsr_ and is only shown once.

Base64-encode for Basic auth

The Admin API uses HTTP Basic auth with the key as the username and an empty password. Base64-encode it with a trailing colon: echo -n 'crsr_your_api_key:' | base64, then paste the result into the credential field.

Warning

Never share credentials publicly. Store them securely and only enter them in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Cursor

Go to Managed Secrets > Add Provider > Cursor.

Enter credentials

Paste your Base64 Credentials into the credential field.

Save

Click Save. You’ll receive a grant_id to use with the SDK.

Using in Code

response = await alter_app.request(
    HttpMethod.GET,
    "https://api.cursor.com/teams/members",
    grant_id="YOUR_GRANT_ID",
)

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
teams/members	read	GET	/teams/members
teams/remove-member	admin	POST	/teams/remove-member
teams/user-spend-limit	admin, payment	POST	/teams/user-spend-limit
teams/audit-logs	read	GET	/teams/audit-logs
teams/daily-usage-data	read	POST	/teams/daily-usage-data
teams/spend	read	POST	/teams/spend
teams/filtered-usage-events	read	POST	/teams/filtered-usage-events
groups/list	read	GET	/teams/groups
groups/create	write	POST	/teams/groups
groups/get	read	GET	/teams/groups/{groupId}
groups/update	write	PATCH	/teams/groups/{groupId}
groups/delete	delete	DELETE	/teams/groups/{groupId}
groups/members/add	admin	POST	/teams/groups/{groupId}/members
groups/members/remove	admin	DELETE	/teams/groups/{groupId}/members
repo-blocklists/list	read	GET	/settings/repo-blocklists/repos
repo-blocklists/upsert	admin	POST	/settings/repo-blocklists/repos/upsert
repo-blocklists/delete	admin, delete	DELETE	/settings/repo-blocklists/repos/{repoId}