Cursor

Runtime leak protection and log redaction for Cursor agents. Give Cursor real secrets while redacting them from output, terminals, and agent transcripts.

Watch demo →

Prerequisites

Install the Cursor CLI. The Cursor desktop app does not necessarily install the separate agent command.

$ curl https://cursor.com/install -fsS | bash
$ agent --version

Install

Get the Dotenvx CLI.

$ curl -sfS https://dotenvx.sh | sh

Add your secrets

Add a secret to your .env file.

$ echo "HELLO=World" > .env

Run Cursor with redaction

Runtime leak protection: Cursor gets real secrets, while log redaction strips them from its output.

$ dotenvx run --redact -- agent -p --force 'Run `dotenvx get HELLO` and echo back just Hello VALUE' --output-format text
Hello [REDACTED]