Cursor
Run by Anysphere
How to detect Cursor
Cursor names itself in its user agent, but anyone can copy a user agent, so it is detected by confirming the user agent against other signals: where the traffic comes from, such as the IP address and hosting network, matches the operator; and automation patterns from an app running on a person's computer.
- Detection method
- Self-declaredThe agent names itself in its user agent, and Verisoul confirms it with network, device or behavioral data. A user agent alone is never enough.
- Signals that identify it
- NetworkWhere the traffic comes from, such as the IP address and hosting network, matches the operator
- DeviceNames itself as Cursor in its user agent, which we check against the rest of the session
- BehavioralAutomation patterns from an app running on a person's computer
Every signal Verisoul checks for Cursor
Cursor names itself in its user agent. Anyone can copy that, so we only label a session Cursor when the other signals check out too.
- Not used
Cryptographic
Not needed to identify it
- Used
Network
Where the traffic comes from, such as the IP address and hosting network, matches the operator
- Used
Device
Names itself as Cursor in its user agent, which we check against the rest of the session
- Used
Behavioral
Automation patterns from an app running on a person's computer
How often you'll see it
Uncommon
Seen on some sites, in small volumes
Questions about Cursor
How do you detect Cursor?
Cursor names itself in its user agent, but anyone can copy a user agent, so it is detected by confirming the user agent against other signals: where the traffic comes from, such as the IP address and hosting network, matches the operator; and automation patterns from an app running on a person's computer.
What is Cursor?
Cursor is Anysphere's AI code editor and its built-in agent.
Does Cursor identify itself?
Partly. Cursor names itself in its user agent, but user agents are easy to copy, so the name alone is not proof.
Can a bot pretend to be Cursor?
A bot can copy Cursor's user agent or markers, but the network, device and behavior signals will not match, so it is not labeled Cursor.
How common is Cursor?
Uncommon. Seen on some sites, in small volumes.
What does the Verisoul API return for Cursor?
Every session Verisoul identifies as Cursor carries an agent block with id "cursor", name, provider, type "ai_agent", detection_method "self_declared" and the detection_signals used (network, behavioral). Build rules on the id, type and detection method.