Skip to main content
Opal’s integration with Cursor allows you to gain visibility over access to Cursor Organizations and monitor user roles within your development environment. With the Cursor integration, you can:
  • View all users who have access with specific roles to your Cursor Organization
  • Monitor usage
  • Grant and revoke access to Cursor Origin repositories

​
Supported resources

Origin repositories are available only if you connect an Origin App in step 2. Mirrored Origin repositories are not imported, because their access is managed on the mirror source.

​
Supported roles

Opal syncs the following default Cursor roles:
  • Admin: Full administrative access to the Cursor Organization
  • Member: Standard member access to the organization
  • Unpaid Admin: Administrative access without billing privileges
Opal also syncs any custom roles you have configured in your Cursor Organization. Origin repositories support the following roles:
  • Read
  • Write
  • Admin
Opal does not import repository grants that use a custom Origin permission policy.

​
Cursor groups

When you connect Origin, Opal imports the following Cursor groups:
  • Team Members and Team Admins: the built-in groups for your Cursor team. Opal derives their membership from your Cursor team members.
  • Any custom Cursor group that has been granted access to an Origin repository.
You can grant and revoke a Cursor group’s access to Origin repositories from Opal. Opal can’t change the members of a Cursor group. Manage group membership in Cursor. Cursor doesn’t expose the membership of custom groups, so Opal doesn’t show it.

​
Requirements

Before you begin, you must:
  • Be an Opal Admin
  • Have Admin permissions in your Cursor Organization
  • To manage Origin repositories, have an Origin App installed on your Cursor team

​
1. Retrieve an API key in Cursor

To allow Opal to access your Cursor Organization, you must first create an Admin API key in Cursor:
  1. Navigate to your Cursor Organization settings (Settings > API Keys)
  2. Generate a new Admin API key
Save the key, as you won’t be able to retrieve it later.

​
2. (Optional) Connect Cursor Origin

The Admin API key doesn’t give Opal access to Origin. To manage Origin repositories, create an Origin App in Cursor and install it on your team. Then collect the following:
  • The App ID
  • The Installation ID
  • The Ed25519 private signing key for the app, in PKCS#8 PEM format
You must provide all three values to enable Origin. If you leave all three blank, Opal manages only your Cursor Organization. The app installation must be able to list the repositories you want Opal to manage. If it can’t, the Origin validation fails. You can also add these values later by editing your existing Cursor app and filling in Origin App ID, Origin Installation ID, and Origin App Private Key. Leave a field blank to keep its current value.

​
3. Create Cursor app in Opal

In Opal, go to Inventory > +App and select Cursor. Name your Cursor app, select an App admin, provide a description, and enter your API Key from step 1. To enable Origin, also enter your Origin App ID, Origin installation ID, and Origin App private key from step 2. Opal validates the Origin connection by listing the repositories the app installation can access. After you save the app, you can import your Cursor resources from … > Import items.
Last modified on November 4, 2026