Cursor

Use Cursor data with Cortex XSIAM.

The capabilities and sub-capabilities listed for this connector are available with any active Cortex Cloud Posture Security license.

This connector includes the following capabilities and sub-capabilities (if applicable):

• Agent Security Scanning

How to configure the Cursor connector

To access Cursor Enterprise, Cortex XSIAM requires the following information, which you will specify during the connection process:

• Instance URL
• API Key

Due to Cursor Enterprise API restrictions, any discovery for Tools and Knowledge Bases is limited to the last 30 days. If you want to increase this duration, contact Technical Support.

Task 1: Generate Cursor API key

1. Go to the Cursor Enterprise dashboard and select Settings > API Keys > New API Key.
2. Copy the generated Admin API Key and have it handy for data connection.

Task 2: Connect Cursor to Cortex XSIAM

1. In Cortex XSIAM, navigate to Settings → Data Sources & Integrations.
2. Click + Add new.
3. In the Add Data Sources or Integrations page, search for Cursor.
4. Under Recommended, hover over the new Cursor integration and click Add Instance to launch the configuration wizard.
5. Under the Capabilities tab, Enter a Name for your application.
6. Select Security Posture under Default Capabilities.
7. Click Next.
8. Under Connection, enter your Instance URL, and API Key.
9. Under Configuration tab, select a Sync Interval. Choose a meaningful Tag to distinguish between various applications in different environments.
10. A confirmation message indicates that Cursor is successfully connected. Confirm the Summary details and click Save instance.