Cursor has opened public submissions for the Origin App Marketplace. Teams can connect repository work to CI, reviews and deployment services, but public availability, marketplace listing and active installation are different states.

RELATED BUYER PROFILEOrigin integration access and permission checklistPricing · access · strengths · limitations →CONTINUE THE DECISIONCursor coding workflowEvidence · workflow · next action →CONTINUE THE DECISIONCheck repository and credential boundariesEvidence · workflow · next action →CONTINUE THE DECISIONReview integration evidenceEvidence · workflow · next action →CONTINUE THE DECISIONBudget integration and review costsEvidence · workflow · next action →
THE BRIEF IN 30 SECONDS

What you need to know

  • Cursor opened public Origin app submissions on 13 October
  • Public direct-link installation precedes approved marketplace listing
  • Unlisting or hiding an app leaves existing installations working
01
THE CONTEXT

The new release

Cursor's 13 October changelog introduces a marketplace spanning deployment, CI, review, security, monitoring and project-management integrations. Developer-tool teams can submit apps, using the Origin API with app JWTs, installation tokens and webhooks. Apps can write check runs, pull-request comments and reviews. This is a repository integration update, not a newly released foundation model.

02
WHY IT MATTERS

Why it matters for a coding workflow

HubAI analysis: a coding agent is more useful when a proposed change reaches the team's existing tests and review queue. Connecting another service also adds a new recipient for repository information and another identity that can act on a change. Select the missing step in one real workflow rather than install every available integration. Measure whether it reduces handoff work without weakening review.

03
WHAT HAPPENS NEXT

Public is different from listed—and uninstall is different from hidden

Cursor's publishing guide distinguishes private apps, public apps installed through a direct link, and listed apps approved for the marketplace. It requires a demonstration of install, uninstall and core flows. Crucially, making an app private or unlisting it does not stop existing installations. Repository changes and scope changes also use different controls. HubAI analysis: verify disconnection in both systems rather than treating a missing listing as revocation.

04
THE CONTEXT

Check access, cost and permissions

The update does not establish a uniform marketplace price, free trial or universal UK entitlement. Check the Origin account, integration subscription, requested scopes, selected repositories, data handling and any usage charges. A listing is a supplier review state, not an independent security certificate. A security integration's presence is not evidence that a repository has no vulnerabilities.

05
THE CONTEXT

HubAI buyer verdict

Use one disposable repository and one integration. Install with the minimum permissions, trigger a known change, inspect the resulting event and disconnect from both ends. Then test a scope increase, cancelled consent and a repository removal. Check that stale credentials and webhooks stop working. Keep deployment approval with the existing reviewer until the complete flow is understood.

06
THE CONTEXT

Evidence and limitations

Independent editorial coverage; not sponsored. This briefing uses Cursor's dated changelog and installation documentation checked on 14 October. No commercial relationship, integration quality ranking, security result or independent HubAI Score is asserted. The original permission-boundary illustration is conceptual, not a screenshot of the marketplace.

HUBAI VIEW

Start with selected repositories and prove uninstall. A listed integration is not an independent security assessment or an AI performance result.

Buyer decision signal: 13 October update · repository integrations and public submissions
BUYER ACTION PLAN

What to verify next

1Confirm Origin entitlement and third-party charges

2Install on selected repositories with minimum scopes

3Inspect check runs, reviews and webhook recipients

4Test consent cancellation and permission changes

5Prove uninstall from both systems

6Keep deployment approval and rollback with a named person

Build a side-by-side comparison →
PRIMARY SOURCES

Read the evidence

Capabilities, availability and prices can change. HubAI keeps analysis separate from the underlying official material.

01Cursor: Origin App Marketplace — 13 October 2026Open source ↗02Cursor: installation, scopes and marketplace reviewOpen source ↗