Cursor adds live app building: cloud agents now deploy apps with database, auth and hosting

Cursor has added the ability to build live apps directly in the editor and share them with a link. Announced in its changelog on Nov 5, 2026, the feature has a cloud agent build the app, set up a database, configure authentication, and deploy it. It is available now on all paid plans with cloud agents enabled.

Cursor says agents have lowered the cost of writing code, but that most apps and tools users build never make it off localhost. The company positions this release as a way for anyone in an organization to build tools for their work and share them with teammates.

How it works

Users start a cloud agent and tell it explicitly that they want to build an app. Cursor then:

• Scaffolds the web app
• Spins up a Postgres database if needed
• Sets up authentication behind Cursor SSO
• Provisions hosting

If the app needs to connect to internal systems such as a data warehouse, Cursor asks the user for the required secrets. At publish time, the user picks a unique domain and Cursor returns a live link.

Cursor can deploy apps from new or existing repos across Cursor Origin and GitHub. Support for other git providers such as GitLab is coming soon.

Security checks and admin controls

Before an app goes live, Cursor runs deterministic and agentic security checks aimed at common issues such as secrets written in app files or exposed credentials. If a check fails, the agent reports what it needs to fix. Nothing is published until the checks pass and the user explicitly publishes the app.

Team admins can:

• See every app and secret on the team
• Add their own rules to the security review
• Approve publishes that the review blocked
• Unpublish any app

Sharing

After the checks pass, Cursor deploys the app to the chosen URL. Apps can be shared with specific people, groups, or the entire team, all behind Cursor sign-in. On individual plans, apps can also be shared publicly. Users can also provision a Cursor API key if they want a script or Grok Bot to use their app.

Early use inside Cursor

Cursor says employees across sales, operations, legal, finance, and engineering are already building internal apps. The examples it lists:

• Internal ops tools for event registration, account assignments, and desk seating
• Multimedia customer presentations combining slides, videos, and interactive demos
• Training, enablement, and onboarding experiences for new hires
• Live dashboards and tools for sales teams to track pipeline and opportunities
• Portals to manage engineering services

What this means

This extends Cursor's cloud agents from writing code to running it: the agent's output becomes a hosted application with its own database and access control, not a repo change awaiting deployment. Because apps sit behind Cursor SSO and are shared by link, they are tied to Cursor accounts rather than standalone public services, except on individual plans where public sharing is allowed.

The governance design is the notable part. Publishing requires passing security checks and an explicit user action, and admins have visibility into every app and secret, can add review rules, and can unpublish. For organizations where non-engineers will build tools, those controls determine whether this is usable beyond individual experimentation.

Git provider support is currently limited to Cursor Origin and GitHub, with GitLab and others described as coming soon. Pricing details specific to hosting or database usage are not yet disclosed. The feature requires an up-to-date Cursor client, and documentation is available on Cursor's site.