How to Use the Cerbos MCP in Cursor

Inject live Cerbos authorization logic into your codebase using Cursor and this MCP Server.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Cerbos MCP to Cursor

Create your Vinkius account to connect Cerbos to Cursor and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Cerbos with Cursor

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Generate valid query plans in Cursor

The `plan_resources` tool produces a query plan for obtaining a list of resources a principal is allowed to access. Via the MCP connection, your agent reads this plan and immediately writes the corresponding SQL WHERE clauses into your backend files. Validating those rules happens through the `check_resources` tool. You ask the editor to verify permissions for a specific principal on a set of resources, and it returns a read-only evaluation to confirm your code matches your intended security model.

Test AuthZEN rules via MCP Server

The `authzen_evaluation` tool executes single-action checks using the AuthZEN entity model directly from your editor. Instead of writing mock payloads, your agent fires real evaluation requests to your local engine while you write the implementation. Complex scenarios require the `authzen_evaluations` tool for batch processing. Cursor runs execute-all or deny-on-first-deny semantics against multiple access requests, letting you fix bad policy logic before committing the code.

Pull API configuration into your IDE

The `get_authzen_config` tool returns endpoint URLs for the AuthZEN APIs so your agent knows exactly where to route requests. You never have to hunt down internal documentation to find the right staging endpoints. Version mismatches break builds, which is why the `get_server_info` tool exists. The agent checks the version and build details of the running Cerbos instance to ensure your new policies are compatible with the deployed engine.

Setup guide

Set up Cerbos MCP in Cursor

Prerequisites

Cursor installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP Settings

Go to Cursor Settings → MCP or open the Command Palette (Cmd+Shift+P / Ctrl+Shift+P) and search for "MCP: Add Server".
2

Add the Cerbos MCP

Cursor will create or open .cursor/mcp.json in your project root. Paste the JSON snippet on the right. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Enable Agent mode

Open Composer (Cmd+I / Ctrl+I) and switch to Agent mode using the dropdown at the top. MCP tools are only available in Agent mode.
4

Verify the connection

Ask Cursor something like "List my recent Cerbos transactions." If the MCP tools are loaded correctly, Cursor will call the Cerbos tools automatically. You can also check Settings → MCP for a green status indicator.

.cursor/mcp.json

{
  "mcpServers": {
    "cerbos-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Cerbos. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Cerbos now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Cerbos MCP in Cursor

Create an mcp.json file in your project root. Add the server command and arguments, then toggle Agent mode on in your chat panel.

Yes. The agent pulls the abstract syntax tree from the query planner tool and translates it into your specific ORM syntax directly in your active file.

Your agent can trigger bulk evaluations using the batch tool. It reads your local policy files and runs arrays of principal-resource pairs to validate your logic.

You add the remote URL to your project-scoped MCP configuration. The editor will route all tool calls over HTTPS instead of running a local subprocess.

The editor only shares specific principal attributes and resource IDs required for the current evaluation. Vinkius isolates the connection in an ephemeral sandbox, ensuring your proprietary access matrices are never stored or used for model training.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript