@lykhoyda/pi-cursor-subscription

Use the models on your Cursor subscription inside the Pi Coding Agent. After you sign in, Pi can call Claude, GPT, Composer, Gemini, Grok, Kimi, and whatever else your Cursor account currently offers. No separate provider API key.

This package registers a cursor provider. It is a fork of @rahularya01/pi-cursor.

Unofficial. Not affiliated with Cursor / Anysphere. The protocol is reverse-engineered and can change. Use only on accounts you are allowed to access, and read the source before /login cursor.

Requirements

• Pi Coding Agent and Pi AI >= 0.86.1 (including Pi 1.3.0)
• Bun >= 1.4.0 (the only supported runtime)
• A Cursor account

Install

Installs the release currently published on npm. How a release is published is in CONTRIBUTING.md.

pi install npm:@lykhoyda/pi-cursor-subscription

Restart Pi or run /reload. To update this package later:

pi update npm:@lykhoyda/pi-cursor-subscription

Quick start

1. Sign in. If the Cursor desktop app is logged in on this machine (or the Cursor CLI on macOS), that login is reused. Otherwise:

   /login cursor

2. Pick a model. Open /model and choose a cursor/… row, or list ids, context windows, and thinking levels:

   /cursor.models

   The live catalog comes from Cursor after you sign in. It can differ by plan.

3. Chat. If something fails, run /cursor.doctor first (token source, endpoint, last error).

Usage and config

Commands

Pi thinking levels (off, minimal, low, medium, high, xhigh, max) map onto Cursor variants when the model advertises them. Limit the picker with enabledModels in ~/.pi/agent/settings.json.

Authentication

Credentials are tried in this order:

1. CURSOR_ACCESS_TOKEN
2. Pi OAuth store (~/.pi/agent/auth.json from /login cursor)
3. Cursor CLI tokens in the macOS Keychain (cursor-access-token / cursor-refresh-token)
4. Cursor IDE globalStorage/state.vscdb (macOS, Linux, Windows, or WSL; on WSL, the current Windows user only)

/login cursor wins over harvested CLI/IDE tokens so another Cursor login on the machine does not silently override yours.

CURSOR_ACCESS_TOKEN is also registered as Pi's provider auth environment source, so Pi can select and stream Cursor models with an empty Pi credential store. The token is resolved at runtime and is not copied into Pi's auth file. Without an environment token or a Pi login, Pi may still refuse model selection even if the extension can resolve CLI/IDE credentials directly.

Because of that registration, /login cursor shows a chooser. Pick Sign in with an account for the browser sign-in. Choosing Sign in with an API key overwrites the saved Cursor sign-in in Pi's auth file, and the extension ignores that key: it falls back to the other credentials above, or to none with PI_CURSOR_SYSTEM_CREDENTIALS=0.

To skip Keychain / IDE reuse:

export PI_CURSOR_SYSTEM_CREDENTIALS=0

Native exec and hosted web

By default, Cursor-native shell, fetch, write, and delete run on the open Run RPC, outside Pi's sandbox and confirmation UI, so a session with no Pi tools can still act. read, ls, and grep always run on that channel.

Native shell is not sandboxed: only the starting directory is checked; the command can cd anywhere your user can. Secret-named env vars are stripped from the child and zeroed in Pi's own inspectable environment. See SECURITY.md. Run Pi in a container or VM if that risk is unacceptable, or turn native exec off:

export PI_CURSOR_NATIVE_EXEC=0

With that set, privileged execs go through Pi tools (bash, edit, write) instead.

Native fetch refuses loopback, private-network, link-local / cloud-metadata, and other internal addresses, including via redirects.

Cursor-hosted web search / Exa fetch prompts are rejected unless you opt in (PI_CURSOR_HOSTED_WEB=1). That flag is independent of native exec.

Cursor can see Pi's MCP tools. Cursor subagents are not supported and return an error.

Environment variables

Troubleshooting

• No API provider registered for api: cursor-native: pi update npm:@lykhoyda/pi-cursor-subscription then /reload.
• 401 / not logged in: /login cursor, or check /cursor.doctor (tokenSource).
• Hung stream / wire errors: /cursor.doctor (clientVersion, wireDrift). Try pinning PI_CURSOR_CLIENT_VERSION, or set PI_CURSOR_PROVIDER_DEBUG=1.
• Stale model list: Open /model to refresh, or delete the cache under PI_CURSOR_CACHE_DIR.

Development

See CONTRIBUTING.md.

Attributions

Wire patterns from opencode-cursor and @pi-stef/cursor. Upstream: Rahularya01/pi-cursor.

License

MIT