Cursor Live Apps: Build, Deploy and Share Internal Apps from a Cloud Agent
CursorCursor introduced the ability to build live apps directly from a cloud agent and share them with a link. Cursor scaffolds the web app, provisions a Postgres database, sets up authentication behind Cursor SSO, and deploys it to a domain the user picks. Publishing is gated by deterministic and agentic security checks, and team admins can review, approve and unpublish any app. The capability is available on all paid plans with cloud agents enabled.
Key Takeaways
- Cloud agents now take an app from prompt to live URL, scaffolding the web app, provisioning a Postgres database, configuring auth and deploying it in one flow.
- Authentication is built in behind Cursor SSO, so apps are shared with specific people, groups or a whole team behind Cursor sign-in rather than being left open.
- Publishing is gated by security checks, both deterministic and agentic, that catch hard-coded secrets and exposed credentials, and nothing goes live until they pass and the user explicitly publishes.
- Team admins keep oversight: they can see every app and secret, add custom review rules, approve blocked publishes and unpublish any app.
- The target audience is non-engineers as well as developers, with Cursor citing internal apps built by sales, operations, legal and finance staff, such as dashboards, onboarding portals and ops tools.
- The feature is available on all paid plans with cloud agents enabled, with deploys from Cursor Origin and GitHub repos and GitLab support described as coming soon. Individual plans can also share apps publicly.
From Localhost to a Live Link
Cursor has added a way to build live apps without leaving the product. According to Cursor, agents have lowered the cost of writing code, but most apps and tools people build never make it off of localhost. With this release, a user describes what they want, and Cursor builds the app, sets up a database, configures authentication and deploys it, returning a link that can be shared. Cursor positions this as a way for anyone in an organization to build useful tools for their work and share them with teammates.
How It Works
To start, a user kicks off a cloud agent and states explicitly that the goal is to build an app. Cursor then scaffolds the web app, spins up a Postgres database if one is needed, sets up authentication behind Cursor SSO, and provisions hosting. If the app has to connect to internal systems such as a data warehouse, Cursor asks the user for the secrets it needs.
When the user is ready to publish, they pick a unique domain and Cursor returns a live link. Cursor can deploy apps from new or existing repositories across Cursor Origin and GitHub, and support for other git providers such as GitLab is described as coming soon.
What Teams Are Building
Cursor says users across sales, operations, legal, finance and engineering are already building internal apps. The examples it lists include:
- Internal ops tools for event registration, account assignments and desk seating
- Multimedia presentations for customers that combine slides, videos and interactive demos
- Training, enablement and onboarding experiences for new hires
- Live dashboards and tools for sales teams to understand their pipeline and opportunities
- Portals to manage engineering services
Controls and Guardrails
Publishing runs through a security review. Cursor runs deterministic and agentic checks to catch common issues such as secrets written into app files or exposed credentials. If a check fails, the agent explains what it needs to fix, and nothing goes live until the checks pass and the user explicitly publishes the app.
Team admins can see every app and secret on the team. They can add their own rules to the security review, approve publishes that the review blocked, and unpublish any app.
Sharing and Access
Once the checks pass, Cursor deploys the app to the chosen URL. Apps can be shared with specific people, groups or the entire team, all behind Cursor sign-in. On individual plans, apps can also be shared publicly. Users can additionally provision a Cursor API key so that a script or Grok Bot can use the app.
Availability
Live apps are available now on all paid plans that have cloud agents enabled. Users need to update Cursor to try the feature, and Cursor points to its documentation for further details.