Agent Approve for Cursor
Centralized approvals, guardrails, and activity monitoring for Cursor from your phone
Agent Approve gives you centralized control over Cursor from your phone. Approve or deny shell commands, MCP tools, and built-in actions from your iPhone or Apple Watch, with push notifications so you know the moment your agent needs input.
You get one shared set of allow and deny rules, one activity history, and one approval workflow that works the same way across Cursor, Claude Code, Gemini CLI, Codex, OpenCode, OpenClaw, and Copilot.
Quick start
Download Agent Approve from the App Store and complete onboarding.
Run npx agentapprove on your development machine and select Cursor.
Scan the QR code with your phone to pair.
Start using Cursor — approval requests arrive on your phone.
Install command
npx agentapproveAgent Approve config: ~/.agentapprove/
Cursor hook config: ~/.cursor/hooks.json
Recommended configuration
- •Enable auto-run mode in Cursor Settings — set it to "run everything" to let hooks handle approval.
- •Optionally disable "Browser tool protection" and "MCP tool protection" for full delegation to Agent Approve.
Capabilities
Good to know
Unified hook coverage – Cursor shell, MCP, and built-in tool hooks all flow through the same mobile approval workflow and shared policy.
Follow-up commands – When the agent stops, you can send a voice, text, or quick-select reply from your phone to keep the agent working.
Extended timeout – Stop hooks use a 600-second timeout so you have time to decide.
Bulk command parsing – Policy evaluation parses shell commands chained with && into individual sub-commands evaluated independently. A dangerous command like rm -rf hidden as the third step in a chain is caught even when the batch starts with safe commands.
Stay up to date – Run npx agentapprove again at any time to update hooks to the latest version.
Use cases
Step away from your laptop and approve shell or MCP actions from your iPhone or Apple Watch instead of leaving Cursor in full auto-run.
Block dangerous commands like rm -rf even when they are buried in a multi-command chain — one deny rule applies across Cursor and all your other agents.
Get notified when Cursor needs input and send a follow-up task from your phone via voice or text.
Track Cursor MCP activity and command approvals in the same history as the rest of your agent stack.
Questions about Cursor
A few common questions about how Agent Approve fits alongside Cursor.