api

Get system information: getApp(), getSystemInfoSync() Lifecycle management: application-level events such as onLaunch and onShow.

Cursor rule for Cursor

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add rules/dcloudio/uni-ai-x/api
Clone the repo
git clone --depth 1 https://github.com/dcloudio/uni-ai-x

Made for: Cursor.

Per session 300 This file is loaded in full into every session.
When invoked 300 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin unknown No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00300 $0.00300
Opus 5 $0.00150 $0.00150
Sonnet 5 $0.00060 $0.00060
Haiku 4.5 $0.00030 $0.00030

Measured today against content hash cf84bd4508bf, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

api scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/rules/api.mdc · 34 lines

What it actually says

Global API (no uni. prefix required)

Get system information: getApp(), getSystemInfoSync() Lifecycle management: application-level events such as onLaunch and onShow

Platform native APIs

Android/iOS/Harmony/Web Mini Program can be directly called by the native interface of all platforms (import through import) Example: import Build from 'android.os.Build' to get the device model

Cross-platform encapsulation API

Network request: uni.request (Promise supported) File operation: uni.writeFile (overwrite/append mode needs to be explicitly declared) Location service: uni.getLocation (need to dynamically apply for location permission)

Cloud Service API

uniCloud database: uniCloud.database() File storage: uniCloud.uploadFile (supports multipart upload)

UI Component API

Custom component communication: $emit/$refs binding UI drawing: uni.createCanvasContext (WebGL supported)

Key usage specifications

  • iOS does not support direct calls to Swift APIs in JS-driven mode, and must be encapsulated as uts plug-ins
  • Dynamic permission application process: Registered permission listener: uni.addInterceptor('beforeEnter') Permission verification: uni.checkSetting({scope: 'scope.userLocation'}) Pop-up application: uni.authorize({scope: 'scope.camera'})
  • The native API must be encapsulated as a uni_modules plugin
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 34 lines · 300 tokens per session scan A cf84bd4508bf

Subscribe to this mod's changes

api is a cursor rule published in the GitHub repository dcloudio/uni-ai-x (85 stars, last pushed today), licensed Apache-2.0. It adds 300 tokens to every session, about $0.0015 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.