Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/pivanov/agents-wire/cursorgit clone --depth 1 https://github.com/pivanov/agents-wireWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00648 |
| Opus 5 | $0.00000 | $0.00324 |
| Sonnet 5 | $0.00000 | $0.00130 |
| Haiku 4.5 | $0.00000 | $0.00065 |
Grade A, and why
cursor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 93 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Cursor
Agent ID: cursor
Cursor's agent CLI. Speaks ACP natively via cursor agent acp - no bridge package needed.
Install
Install the Cursor app and ensure the cursor CLI is on your PATH. See the Cursor Agent CLI docs.
Sign in to the Cursor application to authenticate.
Quick Start
import { agents } from "@pivanov/agents-wire";
const result = await agents.ask(
"cursor",
"Explain this repo",
{
permission: "auto-allow",
},
);
console.log(result.text);
Model Selection
cursor-agent acp does not accept a --model flag (verified via --help). options.model
is forwarded as ACP modelPreference but is currently silently ignored by cursor-agent acp.
To list the models Cursor supports at runtime, call listAvailableModels():
import { definitionFor } from "@pivanov/agents-wire/catalog";
const def = definitionFor("cursor");
const models = (await def.listAvailableModels?.()) ?? def.models ?? [];
// models is IAgentModelOption[] - falls back to static list on any failure
console.log(models.map((m) => m.id));
Configure the active model via the Cursor application settings. options.effort is sent
via ACP setSessionConfigOption (best-effort); Cursor's effort variants are typically
baked into model IDs (kind: variant) - for example a model id might carry a -low,
-high, or -xhigh suffix. Use listAvailableModels() to see the live IDs.
Capabilities
| Feature | Supported |
|---|---|
ask / stream / session |
✅ |
askJson |
✅ |
| MCP stdio | ✅ |
| MCP http/sse | ✅ |
Session listing (listSessions) |
✅ |
| Tool call interception | ✅ |
Mode switching (setMode) |
✅ (auto, max) |
Cost Tracking
Cursor is subscription-based and does not report per-turn costUsd. cost.snapshot.totalUsd stays at 0, so maxCostUsd does not trigger. Monitor usage with cost.turnCount.
Auth Failure Detection
If the Cursor application is not signed in, the SDK catches the authentication-failure pattern in stderr and throws AgentUnauthenticatedError.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 93 lines · 0 tokens per session scan A 16a085ba86ae
cursor is an agent published in the GitHub repository pivanov/agents-wire (5 stars, last pushed 3mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 648 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
codex-execute
Implement a SPECIFIC, well-defined plan or plan-step with Codex. Use ONLY when the user has a written plan, plan-step, named files, or acceptance criteria to execute ("execute this via codex", "implement this plan", "/codex:execute", or a --plan file is in context). Do NOT use when the user is stuck/exploring (use…
cursor-delegate
Delegate a SPECIFIC, well-defined implementation task or plan step to Cursor in agent mode on the Auto model. Cursor is the fast lane for mechanical writing — long file writes (200+ lines), pattern-following across many files, bulk refactors. Supports autonomous multi-step runs via --until-done. Pair with…
cursor-research
Delegate read-only EXTERNAL web/documentation research to Cursor. Use when the user wants current library/API/docs research, "what's the current way to…", or to compare approaches — and you'd rather not spend Claude's context on web reading. Cursor runs read-only (ask mode) with web search + fetch and returns findings…
opencode-research
Delegate read-only EXTERNAL web/documentation research to OpenCode. Use when the user wants current library/API/docs research, "what's the current way to…", or to compare approaches — and you'd rather not spend Claude's context on web reading. OpenCode runs read-only (ask mode) with web search + fetch and returns…
codex-rescue
Hand an OPEN-ENDED or stuck problem to Codex for independent investigation. Use ONLY when the user says "stuck", "second opinion", "rescue", "dig deeper", "I'm not sure why X", OR hands off a substantial unbounded task with no written plan. Do NOT use when a plan or plan-step file is in context (use codex-execute) or…
cursor-explore
Delegate quick read-only CODEBASE exploration to Cursor. Use to answer questions about the current repository ("where is X handled?", "how does Y flow?", "summarize the adapter layer") without spending Claude's tokens reading files. Cursor runs read-only (ask mode) using semantic search, grep, and its Explore…