Extensions and cloud agents

Part 12 of 16

MCP servers: install from an approved list, pin versions, pass secrets as ${env:NAME}, and give servers that read tickets, errors, chat or email read-only scopes, since outsiders write that content (The Hacker News).
Extensions: install only from your organisation’s allowlist and publishers you can verify.
Cloud agents: “The agent has internet access by default”, so choose “Default + allowlist” or “Allowlist only”, and give environments only the secrets a task needs (Cursor docs).

/* Without JS the drawer cannot open, so show the sidebar inline instead. */ @media (max-width: 900px) { .sidebar { position: static; transform: none; width: auto; box-shadow: none; } .navbar-toggle, .sidebar-head { display: none; } }

Security for Cursor Development: Extensions and cloud agents

Extensions and cloud agents