Connect to Cursor

# In Cursor chat or Composer:

"Connect to the database using our staging credentials"

# Cursor calls get_secret:
# namespace: "staging/database"
# key: "DATABASE_URL"

# Then uses it in generated code:
import asyncpg

async def get_db():
    # DB URL fetched from Agent Secret Store vault
    url = await vault.get_secret("staging/database/DATABASE_URL")
    return await asyncpg.connect(url)

# In Cursor chat:

"Generate a new API key for the webhook integration and store it in the vault"

# Cursor generates a secure random key, then calls set_secret:
# namespace: "production/webhook"
# key: "API_KEY"
# value: "<generated-key>"
# secret_type: "api_key"
# access_tier: "sensitive"

# Response:
# ✓ Generated and stored webhook API key at production/webhook/API_KEY (v1)
# The key has been stored in your vault. Use vault.get_secret() to retrieve it.

# In Cursor Composer:

"Check if my request for the Stripe production key was approved"

# Cursor calls get_approval_status:
# approval_id: "00000000-0000-4000-8000-000000000123"

# Response:
# Approval status: PENDING
# Requested by: agt_cursor_dev
# Requested 5 minutes ago — waiting on 1 of 2 approvers

// Cursor generates this code pattern automatically when it
// knows you're using Agent Secret Store:

import { AgentVault } from '@agentsecretstore/sdk';

const vault = new AgentVault({ agentKey: process.env.ASS_AGENT_KEY! });

// Development: reads from staging namespace
// Production: reads from production namespace
const namespace = process.env.NODE_ENV === 'production'
  ? 'production'
  : 'staging';

export async function getGeminiKey(): Promise<string> {
  return await vault.getSecret(`${namespace}/gemini/GEMINI_API_KEY`);
}