Permissions
Cursor Agent decides whether ACP tool calls from the Agent are allowed. Configure the policy on the Chat chrome (⋯ on a tool run, or Settings → General).
These settings apply to this Burp extension. They are not Cursor IDE permission settings.
The chosen policy is stored in host settings (with launch, MCP, and related prefs). The UI labels it for the chat you’re working in; changing it updates the live connection for the active chat when possible.
Policies
| Policy | Behavior | Good for |
|---|---|---|
| Ask | Inline Allow / Deny banner for each tool; deny on timeout (~60s) | Default · learning · untrusted targets |
| Allow safe (read-only) | Allow read / search / fetch / list-style tools; deny execute / shell / send and similar mutators | Passive review with less clicking |
| Allow all (this chat) | Auto-allow ACP tools for connections using this policy (confirm when enabling) | Trusted, fast iteration |
| Deny | Reject every tool request | Read-only chat / demos |
Prefer Ask until you trust the workflow.
Tool-run context menu wording differs slightly (e.g. Auto-review (Ask), Allowlist (safe read-only), Run Everything (allow all), Deny tools) but maps to the same four policies.
How Ask works
When a tool needs approval:
- An inline Permission needed banner appears above the composer (Allow once / Deny).
- If you’re not on the Cursor Agent tab, Burp’s Event log gets a notice, the system beeps, and the chat may show an unread mark.
- If you ignore the ask long enough, the request is denied.
Modal dialogs are only a fallback if the Suite tab isn’t ready.
Extra gates
| Action | Behavior |
|---|---|
Chat rename from the Agent (burpai-rename) | Always requires Allow — even under Allow all |
| Rule / memory writes (create / upsert / delete) | Follow the permission policy (Ask → Change rules / memories?). Denied under Deny and Allow safe |
| Rule / memory reads / lists | Allowed without a write gate |
Manual rename from the sidebar and manual Rules/Memories edits in Settings do not go through the Agent gate.
Tips
- Prefer Cursor’s Burp MCP for proxy / Repeater work instead of inventing parallel tools in the extension.
- Allow safe is intentionally conservative — shells and mutators stay denied.
- If a turn sits on “Waiting for permission”, look for the inline banner or switch to the Cursor Agent tab.