AI Catchup

Cursor Live Apps Can Build and Deploy Web Apps From Prompts

By 2 min read

Cursor says Live Apps turns an app description into a deployed app that can be shared through a link. Cursor says its publish flow runs security checks. Cursor says team admins can approve publishes that a security review blocked. Cursor says it is available on all paid plans with cloud agents enabled.

Cursor says Live Apps lets users describe an app, then build and share a deployed version through a link. For the Live Apps workflow, Cursor says it will scaffold the web app, spin up a Postgres database if needed, set up authentication behind Cursor SSO, and provision hosting. Cursor says the publish flow includes security checks and an explicit publish step. Cursor says team admins can approve publishes blocked by a security review. Cursor says the feature is available on all paid plans with cloud agents enabled (Cursor changelog).

Cursor's changelog says Live Apps can scaffold a web app, spin up a Postgres database if needed, put authentication behind Cursor SSO, and provision hosting. Cursor says users choose a unique domain when publishing and receive a live link. Cursor says the workflow supports new or existing repositories on Cursor Origin and GitHub (Cursor changelog).

Cursor says that if an app needs to connect to systems such as a data warehouse, it will ask for the secrets it needs (Cursor changelog).

Security checks before publishing

Cursor says publishing triggers deterministic and agentic security checks for common issues such as secrets written into app files or exposed credentials. Cursor says that if a check fails, the agent tells the user what it needs to fix; nothing goes live until the checks pass and the user explicitly publishes it. Cursor says team admins can approve publishes that a security review blocked (Cursor changelog).

Those checks add a publishing gate, not a reason to skip reviewing the app. Check its behavior, access rules, and any data it handles before sharing it.

Who can use and share Live Apps

Cursor says Live Apps is available on all paid plans with cloud agents enabled. Cursor says teams can share apps with specific people, groups, or the entire team behind Cursor sign-in, while individual plans can share apps publicly. Cursor says team admins can see every app and secret on their team, add rules to security reviews, approve publishes that a review blocked, and unpublish apps (Cursor changelog).

Sources

Related coverage

Frequently Asked Questions

What does Cursor Live Apps handle?

Cursor says the workflow can scaffold a web app, set up a Postgres database if needed, put authentication behind Cursor SSO, and provision hosting. Cursor says users choose a unique domain when publishing and receive a live link. ([Cursor changelog](https://cursor.com/changelog/build-live-apps))

What happens if a security check fails?

Cursor says the agent explains what needs to be fixed if a security check fails. Cursor says nothing goes live until the checks pass and the user explicitly publishes it, but team admins can approve publishes that a security review blocked. ([Cursor changelog](https://cursor.com/changelog/build-live-apps))

Can Cursor Live Apps be shared publicly?

Cursor says team apps can be shared with specific people, groups, or the whole team behind Cursor sign-in. Cursor says public sharing is available on individual plans. ([Cursor changelog](https://cursor.com/changelog/build-live-apps))

Get an email when Cursor changes its plans, prices or limits

We check every change against Cursor's own pages before we send. You also get the weekly AI Catchup; one click unsubscribes.