Stop PII & Secret Leaks in Cursor

Cursor sends your code to AI models. AxSentinel makes sure your secrets don't go with it.

Start FreeSetup Guide

The Problem

Cursor's AI features send code context to OpenAI and Anthropic APIs. If your codebase contains hardcoded credentials, .env values, or customer data in test fixtures, that data leaves your machine every time Cursor generates or edits code. Cursor's privacy mode disables some features — AxSentinel lets you keep full AI functionality while blocking sensitive data.

The Solution

AxSentinel sits between Cursor and the AI API as a local proxy. Every request is scanned for PII and secrets in milliseconds. Clean requests pass through instantly. Requests containing sensitive data are blocked or redacted before they ever leave your network.

Get Started in Minutes

1

Install the VS Code / Cursor extension

Cursor supports VS Code extensions. Install AxSentinel from Open VSX (Cursor's extension registry) or sideload the .vsix file.

cursor --install-extension AxDevs.ax-sentinel
2

Or set the API base URL manually

If you prefer the standalone proxy, start it and point Cursor at it. Go to Cursor Settings → Models → OpenAI API Base URL.

http://localhost:8990/v1
3

Verify it works

Open a file containing a test secret (e.g., AKIA1234567890ABCDEF) and trigger a Cursor AI action. AxSentinel will block the request and show a notification.

Key Features

Zero-config with extension

Install the extension and scanning starts automatically. No proxy setup needed.

Works with all Cursor AI features

Tab completion, Cmd+K edits, chat, and multi-file edits are all scanned.

Sub-millisecond latency

Regex scanning adds ~0.1ms. ML scanning adds ~5ms. Unnoticeable in practice.

Three modes

Block (reject request), Redact (strip sensitive data and forward), or Prompt (ask you each time).

Frequently Asked Questions

Does this slow down Cursor's AI features?
No. Scanning takes 1-5ms. Cursor's API round-trip to OpenAI/Anthropic is 500-3000ms, so the scanning overhead is negligible.
Does AxSentinel work with Cursor's privacy mode?
Yes. AxSentinel is complementary — privacy mode limits what Cursor indexes, while AxSentinel scans what gets sent to the AI API.
Can I use the VS Code extension in Cursor?
Yes. Cursor supports VS Code extensions. Install from Open VSX or sideload the .vsix file directly.
What if I use Cursor with multiple AI providers?
AxSentinel auto-detects the provider from each request. Works with OpenAI, Anthropic, and any custom endpoint.

Ready to secure your AI workflow?

Free tier includes regex scanning for unlimited developers. Pro adds ML-powered detection and the compliance dashboard.

Start Free View pricing

Also available for

Claude codeChatgptCopilotVscodeGDPRSOC2HIPAA