> For the complete documentation index, see [llms.txt](https://help.aikido.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.aikido.dev/ai-and-dev-tools/aikido-mcp/cursor-mcp.md).

# Cursor MCP

The Aikido MCP Plugin connects Aikido’s security engine to AI coding tools. It automatically scans AI generated code for vulnerabilities and hardcoded secrets as soon as it is created.

AI assistants can review their own output, but that review is not perfect. Aikido adds a reliable and consistent security layer that checks every generated snippet with proven scanning rules.

**Why use Aikido MCP**

* Deterministic, independent security checks on every AI generated snippet before it is committed
* Immediate detection and remediation of vulnerabilities and hardcoded secrets in AI assisted workflows
* Real time feedback, making AI driven development safer by default

For the full list of tools the MCP server exposes, see [Available tools](/ai-and-dev-tools/aikido-mcp/using-aikido-mcp.md#available-tools).

## Installation

### Via Cursor Marketplace (recommended)

You can also install Aikido MCP directly from the [Cursor Marketplace](https://cursor.com/marketplace/aikido).

{% stepper %}
{% step %}
**Add via Cursor Marketplace**

Open [Aikido on the Cursor Marketplace](https://cursor.com/marketplace/aikido) and click **Add to Cursor**.
{% endstep %}

{% step %}
**Authenticate**

On first use, the MCP server will detect no authentication is set and prompt you to log in. Ask the agent to run `aikido_login`. It will return a browser link. Follow the link to authenticate with Aikido. Your token is stored securely once login is complete.
{% endstep %}

{% step %}
**Add custom instructions**

Add an instruction to your `.cursorrules` file or Cursor custom instructions to ensure the agent uses the MCP server.

```
Scan any new or modified code with `aikido_scan_paths` before finalizing changes. This security check is required.
```

{% endstep %}
{% endstepper %}

{% hint style="info" %}
For CI/CD or headless setups where browser login is not possible, see [Token Authentication](/ai-and-dev-tools/aikido-mcp/token-authentication.md).
{% endhint %}

### Via Aikido IDE Expansion Packs

The easiest way to add the Aikido MCP to Cursor is through the Aikido IDE plugin's Expansion Packs. This handles configuration automatically without any manual setup.

{% content-ref url="/pages/Hw5GlWQTBPXSiaAbs9uy" %}
[Cursor IDE](/ai-and-dev-tools/ide-plugins-overview/cursor-ide.md)
{% endcontent-ref %}

Once the plugin is installed, open the Aikido sidebar and go to **Aikido Cursor Plugin** to enable the Aikido MCP server.

[Learn more about Expansion Packs](/ai-and-dev-tools/ide-plugins-overview/features/aikido-expansion-packs.md)

For ways to ask your agent to use Aikido, see [Example prompts](/ai-and-dev-tools/aikido-mcp/using-aikido-mcp.md#example-prompts).

### Manual installation

For any custom setup, refer to the [npm package page](https://www.npmjs.com/package/@aikidosec/mcp) for detailed manual installation instructions.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://help.aikido.dev/ai-and-dev-tools/aikido-mcp/cursor-mcp.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.