Cursor
Runtime leak protection and log redaction for Cursor agents. Give Cursor real secrets while redacting them from output, terminals, and agent transcripts.
Prerequisites
Install the Cursor CLI. The Cursor desktop app does not necessarily install the separate
agent command.
$ curl https://cursor.com/install -fsS | bash
$ agent --version1. Install
Get the Dotenvx CLI.
$ curl -sfS https://dotenvx.sh | sh2. Add your secrets
Add a secret to your
.env file.
$ echo "HELLO=World" > .env3. Run Cursor with redaction
Runtime leak protection: Cursor gets real secrets, while log redaction strips them from its output.
$ dotenvx run --redact -- agent -p --force 'Run `dotenvx get HELLO` and echo back just Hello VALUE' --output-format text
Hello [REDACTED]