Cursor

Cursor supports MCP servers via a JSON config file. You can register Perfai globally (available in every workspace) or per-project (checked into your repo).

No credentials are required in the config. Calling login opens a browser to Perfai’s own sign-in page (OAuth) and completes automatically — see Login below.

Global installation

macOS / Linux
Windows

File: ~/.cursor/mcp.json

{
  "mcpServers": {
    "perfai-cloud-mcp": {
      "command": "npx",
      "args": ["-y", "perfai-cloud-mcp"]
    }
  }
}

Create the file if it doesn’t exist:

mkdir -p ~/.cursor
touch ~/.cursor/mcp.json

File: %USERPROFILE%\.cursor\mcp.json

{
  "mcpServers": {
    "perfai-cloud-mcp": {
      "command": "cmd",
      "args": ["/c", "npx", "-y", "perfai-cloud-mcp"]
    }
  }
}

Create the file if it doesn’t exist (run in PowerShell):

New-Item -Path "$env:USERPROFILE\.cursor\mcp.json" -Force

Windows needs the cmd /c wrapper because npx is a .cmd shim, not a real executable — without it you’ll see spawn npx ENOENT.

Project-scoped installation

Add the config to .cursor/mcp.json at the root of your project. This makes the server available only when that project is open.

{
  "mcpServers": {
    "perfai-cloud-mcp": {
      "command": "npx",
      "args": ["-y", "perfai-cloud-mcp"]
    }
  }
}

Prefer not to use the browser login (headless machines, CI)? Create a Perfai API key and add "env": { "PERFAI_API_KEY": "pfk_xxxxxxxxxxxx_..." } to the perfai-cloud-mcp entry. If you do, don’t commit that config — add it to .gitignore or keep the key in your global ~/.cursor/mcp.json instead.

Enable the server in Cursor

After saving the config file:

Open Cursor Settings → MCP (or search “MCP” in the command palette).
Confirm perfai-cloud-mcp appears in the server list with a green status indicator.
If it shows as disconnected, click Restart next to the server entry.

The prompts below run inside Cursor’s Agent chat, not your terminal. The only terminal/file steps are creating the config file.

In Cursor’s Agent mode, type:

Login to Perfai

This opens a browser to Perfai’s sign-in page (or uses PERFAI_API_KEY if you set it). Confirm with:

What's my Perfai auth status?

Register an app and run a scan

Register https://your-app.example.com with Perfai

Check the onboarding status for that app

Run a security test on the selected app

Show me the vulnerabilities it found

Fix and verify

One at a time:

Show me how to fix vulnerability 3

All at once, prioritized by severity:

Auto-fix all critical and high vulnerabilities

Then confirm the fixes landed:

Mark vulnerability 3 as fixed

Give me the fix summary

Getting Started

Core Concepts

Hybrid Deployment

Changelog

Global installation

Project-scoped installation

Enable the server in Cursor

Register an app and run a scan

Fix and verify

​Global installation

​Project-scoped installation

​Enable the server in Cursor

​Login

​Register an app and run a scan

​Fix and verify

Global installation

Project-scoped installation

Enable the server in Cursor

Login

Register an app and run a scan

Fix and verify