Email security@pushary.com with details and reproduction steps. Please do not open a public issue for security reports. We aim to acknowledge within 72 hours.

The plugin connects Cursor to the Pushary MCP server at https://pushary.com/api/mcp/mcp using the API key you provide via the PUSHARY_API_KEY environment variable. No key is committed to this repository.

The permission gate (scripts/pushary-gate.mjs) runs only on shell commands matching the regex in hooks/hooks.json. For a matched command it sends, over HTTPS to Pushary:

• the command text,
• the basename of the working directory (e.g. my-repo, not the full path),
• an agent label (Cursor - <project>),
• the Cursor conversation id, so the dashboard kill switch and per-session mode can target this session,
• a machine id — the first 8 hex characters of a SHA-256 of your hostname (never the hostname itself).

It also fetches your permission policy and mode from pushary.com (the policy is cached in the system temp directory for 5 minutes). It contacts no host other than pushary.com, has no third-party dependencies, and writes only that policy cache to disk. The full source is in this repository — read it before installing.

The gate is configured failClosed: true. If the gate cannot produce a decision (crash, timeout, invalid output), Cursor blocks the matched command rather than letting it run unapproved. When Pushary is reachable but you don't answer in time, it falls back to Cursor's own in-editor approval prompt.