Overview
- Cursor began shipping Build Live Apps on Friday, letting a cloud agent scaffold a web app, provision a Postgres database, configure Cursor single sign-on, and publish the result to a user-chosen domain.
- The feature only works with Cursor cloud agents and is included on paid plans, which means individual users must subscribe at the Premium tier to access prompt-to-deploy publishing.
- Before publishing, Cursor runs deterministic checks and an AI-based review to flag embedded secrets and exposed credentials, and team admins can view apps, add rules, override a block, or unpublish applications.
- Build Live Apps can deploy from new or existing repos on Cursor Origin and GitHub with GitLab support planned, and it asks users for external credentials while keeping those secrets separate from the agent.
- Because Cursor has not fully disclosed policies on data residency, retention after unpublishing, ownership transfer, or whether automated checks catch authorization flaws, teams should pilot the feature, enforce publishing rules, and run manual security tests before using it in production.