Skip to main content
Connect Jsmon to Cursor — the AI-powered code editor — using the Model Context Protocol (MCP). Once connected, you can query scan results, look up secrets, check attack surface data, and manage your Jsmon workspaces without leaving your editor.

​
How It Works

Jsmon provides a remote MCP server at:
Cursor supports remote MCP servers via the Streamable HTTP transport. You add the Jsmon MCP URL to your Cursor configuration, and on first use, an OAuth flow opens in your browser to authenticate with your Jsmon account.

​
Setup

1

Open Cursor Settings

Open Cursor and go to Settings → MCP (or press Cmd + Shift + J on macOS / Ctrl + Shift + J on Windows/Linux to open the MCP configuration).
2

Add Jsmon MCP Server

Click + Add new MCP server and configure:
  • Name: Jsmon
  • Type: Select Streamable HTTP (or URL)
  • URL: https://mcp.jsmon.sh/mcp
3

Authenticate

Save the configuration. When Cursor connects to the Jsmon MCP server for the first time, a browser window will open for OAuth authorization. Sign in to your Jsmon account and approve the requested permissions.
4

Start Using Jsmon in Cursor

Once authenticated, Jsmon tools are available in Cursor’s AI chat and agent mode. Ask questions about your scan data, trigger new scans, or look up intelligence — all inline.

​
Manual Configuration (Config File)

You can also edit the MCP config file directly: Global (all projects):
Project-specific:
Add the following:
Save the file and restart Cursor. You’ll be prompted to authenticate on first use.

​
Use Cases for Developers

Jsmon in Cursor is especially useful when you’re coding and need quick access to security intelligence:
  • Check for exposed secrets — “Are there any leaked API keys in my workspace?”
  • Review scan results while coding — “Show me all API endpoints found on example.com”
  • Validate domains — “What subdomains does Jsmon know about for example.com?”
  • Trigger scans — “Scan this URL with Jsmon” while reviewing code
  • Look up vulnerabilities — “Show me security issues found in workspace X”

​
Permissions

During OAuth authorization, you configure the following scopes:
Cursor supports both global and per-project MCP configurations. Use the global config for personal Jsmon access across all projects, or the project-level config for team setups.