Skip to main content
Glama

cursor_request

Destructive

Run a Cursor Agent request from MCP: choose plan or ask mode, select a model, resume a session, and target a workspace.

Instructions

Run a Cursor Agent request synchronously (auto-defers to a pollable job past the sync deadline when async jobs are enabled; otherwise runs to completion). Default cli uses headless print mode (cursor-agent --print); gated acp uses native cursor-agent acp and accepts prompt, model, a gateway ACP session, and a registered workspace alias.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
modeNoCursor execution mode: plan (read-only planning) or ask (Q&A/read-only)
forceNoEmit --force (Cursor yolo mode; auto-allows commands unless explicitly denied)
modelNoModel name or alias passed via --model
trustNoTrust the workspace in headless mode (--trust)
addDirNoAdditional workspace root directories (--add-dir, repeatable).
promptYesPrompt text for Cursor Agent CLI
sandboxNoCursor sandbox mode override (--sandbox enabled|disabled)
sessionIdNoOn transport=cli, Cursor chat/session ID to resume (emits --resume <id>); gateway gw-* tracking ids are not CLI session ids. On transport=acp, gateway-owned ACP session ID returned by an earlier ACP call; Cursor-native and CLI session ids are rejected.
transportNoTransport selector. Default `cli` uses cursor-agent --print. `acp` uses native cursor-agent acp and fails closed unless [acp].enabled plus [acp.providers.cursor].enabled and runtime_enabled are true. ACP accepts prompt, model, a gateway ACP sessionId, and a registered workspace alias; Cursor CLI-only controls are rejected.cli
workspaceNoWorkspace directory or saved workspace name (--workspace) on transport=cli. transport=acp requires a registered gateway workspace alias. Remote HTTP/OAuth callers must pass an alias; local callers may pass local Cursor workspace paths only on transport=cli.
autoReviewNoEmit --auto-review (Cursor Smart Auto classifier for tool calls)
workingDirNoLocal Cursor Agent process working directory. Distinct from --workspace, which selects a Cursor workspace or saved workspace name; this sets the process cwd. Passing both an absolute workspace path and a different workingDir is rejected rather than silently ranked. Stdio/local callers may pass local paths directly. Remote HTTP/OAuth callers must use relative paths inside a selected registered workspace. Do not call workspace_* tools to fix stdio/local provider path access.
forceRefreshNoBypass dedup and force a fresh CLI run even if a recent identical request exists
outputFormatNoCursor --output-format for --print modetext
resumeLatestNoResume the latest Cursor chat (--continue) on transport=cli. true is rejected on transport=acp.
correlationIdNoRequest trace ID (auto if omitted)
idleTimeoutMsNoTotal-runtime bound, not an idle timer: this provider emits no output until it exits, so the child is killed after this duration even while healthy. Min 30s, max 1h, omit=1h default. Cursor only: this holds for the default text invocation; with outputFormat stream-json the CLI streams incrementally, so the same timer behaves as a genuine idle window.
providerFlagsNoFlags passed to the provider binary verbatim, keyed exactly as the binary spells them (e.g. {"--best-of-n": "3", "--verbatim": true, "--rules": ["a", "b"]}). Use this for any flag your installed CLI accepts that this schema does not name: the binary decides what it supports, not the gateway. true emits the flag alone; a list REPEATS the flag once per item (pass a joined string if your CLI wants a comma-separated value). Values may not start with '-', and a flag the gateway is already emitting for this request is refused rather than duplicated. LOCAL stdio callers only: remote HTTP/OAuth callers are refused every flag here and should use this tool's declared parameters, which carry their own host-path and approval gates.
approvalPolicyNoOn transport=cli, approvalPolicy has no effect because mcp_managed is unavailable. On transport=acp, supplying approvalPolicy is rejected because ACP has its own permission bridge.
optimizePromptNoOptimize prompt before execution
approvalStrategyNoApproval strategy. legacy is the only executable CLI strategy; mcp_managed is rejected before Cursor launches because the CLI adapter cannot isolate ambient MCP configuration. transport=acp has its own permission bridge and also rejects mcp_managed.legacy
compressResponseNoCompress the response display text via the native compressor (default: [compression].enabled in config.toml, off unless opted in). Skipped for structured output.
createNewSessionNoForce a new session on transport=cli. true is rejected on transport=acp.
optimizeResponseNoOptimize response output

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. Addedv3.2.0
  2. Removedv3.0.0
  3. First observedv2.16.0

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false and destructiveHint=true, and the description does not contradict them. The description adds behavioral context not present in the annotations: the sync-deadline deferral behavior, the run-to-completion fallback, the default headless print mode, and the gated acp mode. This gives the agent a clearer model of how the tool executes beyond the safety hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two dense sentences with no filler, front-loading the core action before transport details. It packs significant information about sync behavior, deferral, default transport, and acp gating without becoming bloated. Some complexity is unavoidable given the tool's scope, but the structure keeps it readable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 24-parameter tool with no output schema, the description leaves some gaps: it does not describe what the response looks like, how the deferral should be surfaced, or how the agent should poll the resulting job. The parameter schema is exceptionally rich and compensates for much of the missing context, but the description alone is not fully self-sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and individual parameter descriptions are unusually detailed, covering transport-specific rejections, defaults, and flag behavior. The main description adds only a brief summary of which parameters acp accepts, which is largely redundant with the schema. This matches the baseline of 3 for high schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action and resource: 'Run a Cursor Agent request synchronously'. It also distinguishes this tool from async variants by explicitly mentioning the sync deadline and auto-deferral to a pollable job. It does not name a sibling like cursor_request_async directly, but the synchronous framing is enough to separate it from the async family of tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives useful context about when the tool runs synchronously and when it defers to a pollable job, and it explains the default cli transport versus the gated acp transport. However, it never explicitly tells an agent when to prefer this tool over cursor_request_async or other request tools, nor does it state a clear when-not-to-use condition. The guidance is implied rather than explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/verivus-oss/llm-cli-gateway'

If you have feedback or need assistance with the MCP directory API, please join our Discord server