Install on Cursor

Get Veilguard running in Cursor in under a minute. You'll create one config file and restart.

PrerequisiteNode.js 18 or later — verify with node --version
1

Open Cursor Settings → Tools & MCPs

Press Cmd/Ctrl + Shift + J to open Cursor Settings, then click Tools & MCPs in the left sidebar under Agents. You'll see an empty state — no MCP tools installed yet.

Cursor Settings showing Tools & MCPs panel with No MCP Tools message and arrow pointing to it
2

Create .cursor/mcp.json in your project root

Create the folder .cursor/ in your project root, then create mcp.json inside it. Paste this config:

{
  "mcpServers": {
    "veilguard": {
      "command": "npx",
      "args": ["-y", "--package=veilguard", "veilguard-mcp"],
      "env": {
        "VEILGUARD_KEY": ""
      }
    }
  }
}

Leave VEILGUARD_KEY empty for the free tier. If you already have a Pro key, paste it in now.

The .cursor/mcp.json file open in Cursor with the veilguard MCP server config pasted in
3

Restart Cursor

Close and reopen Cursor completely. Then go back to Settings → Tools & MCPs. You should see veilguard listed with a green toggle and 14 tools enabled.

Cursor Tools & MCPs showing veilguard installed with 14 tools enabled and green toggle
4

Verify it's working

Open a new Cursor Agent chat and ask: "What Veilguard tools do you have access to?" — it should list 14 security tools. Or try: "Use Veilguard to do a full audit".

Cursor agent chat with 'Use veilguard to do a full audit of this project' typed in the input
Pro

Add your Pro key (optional)

In Settings → Tools & MCPs, hover the veilguard row and click the pencil (edit configuration) icon. This opens .cursor/mcp.json. Replace the empty string on VEILGUARD_KEY with your license key, save, and restart Cursor.

Cursor Tools & MCPs showing veilguard row with edit configuration (pencil) button highlighted by an arrow
The mcp.json file with VEILGUARD_KEY field showing PASTE YOUR VEILGUARD KEY HERE with an arrow pointing to it

Get a Pro key at veilguard.dev/pro. Keys look like vg_live_xxxxxxxxxxxxxxxxxxxx.

Notes

  • .cursor/mcp.json is project-level — add it to each project you want protected.
  • A full IDE restart is required after any config change — a window reload is not enough.
  • For auto-scanning, download the .cursorrules file to your project root. Without it, the tools still work but won't fire automatically.