THE ESSENTIALS IN 30 SECONDS

  • Released on November 5, Build Live Apps lets Cursor cloud agents scaffold, secure and host a web app, with a Postgres database when needed.
  • Apps sit behind Cursor SSO and can be shared with people, groups or a whole team; individual plans can also share them publicly.
  • The feature requires a paid plan with cloud agents enabled; Cursor has not published hosting prices or usage limits.

Cursor has extended its cloud agents beyond writing code: since November 5, they can also turn a described application into a running web app reachable through a shareable link. The feature, called Build Live Apps in Cursor's changelog, covers the steps that usually come after local development, from provisioning a database to putting the app online.

From a prompt to a hosted link

According to Cursor's changelog, a user describes the app to a cloud agent, which then scaffolds the project, adds sign-in, runs security checks and provisions hosting. If the app needs storage, the agent creates a Postgres database. The user chooses a unique domain and receives a live URL. When an app has to reach outside systems, such as a data warehouse, the agent asks for the necessary secrets.

Authentication relies on Cursor's own single sign-on. Apps can be shared with named people, groups or an entire team, all behind a Cursor login, and on individual plans they can also be made public. Projects can be deployed from new or existing repositories hosted on Cursor Origin or GitHub; GitLab support has been announced but has not shipped yet.

Security gate and admin controls

Before anything goes live, Cursor runs a mix of deterministic and agent-based checks aimed at problems such as secrets left in app files or exposed credentials. If a check fails, the agent explains what needs fixing, and publication only happens once the checks pass and the user explicitly confirms. Team administrators can see every app and secret in their organization, add their own rules to the review, approve a publish that the review blocked and take any app offline.

What remains unclear

The feature is limited to paid plans with cloud agents turned on. Cursor has not published separate prices for hosting, nor quotas, performance figures under load or details about the underlying infrastructure, and its changelog mentions no pricing change. One developer write-up notes that the setup fits apps that work with Postgres, Cursor SSO and managed hosting, while projects needing custom networking or another identity system will still require a conventional deployment pipeline. It also stresses that the pre-publish checks act as a gate rather than a guarantee of security. Whether apps can later be moved off Cursor's hosting and sign-in has not been addressed either.