1Password integrates with Cursor to secure AI-driven development workflows – News

Cybersecurity and password service provider 1Password LLC today announced a new partnership with artificial intelligence code editor company Cursor Inc. to bring secure, just-in-time secrets to Cursor.

The partnership has started with the deployment of a Hooks Script that gives developers a secure, just-in-time way to ensure required secrets are made available to Cursor’s AI agents via 1Password Environments. The script delivers an AI-native development workflow where secrets are never hardcoded, raw credentials are never handled directly by AI agents and secure access becomes a natural part of writing and running code.

The issue the partnership and Hooks Script are seeking to address is one of basic security, in that developers should never have to paste tokens into configuration files or store long-lived credentials on disk. 1Password also argues that AI agents in their editors should not operate with unrestricted access to secrets either.

Through the integration between 1Password and Cursor Hooks, 1Password becomes the secure source of secrets for Cursor. When the Cursor agent needs to run a command, call an application programming interface or perform an action that requires a credential, the required secret can be made available at runtime through 1Password, but only when authorized by the user.

Security is key to the offering, with no plaintext keys committed to disk or source code, no hard-coded environment variables and no tokens lingering in history. You can’t hack something that isn’t there and by keeping secrets secret, the security posture of Cursor-designed projects is boosted through the integration.

Access is made available securely via 1Password and governed by the access policies set by teams. Project owners also have the ability to configure 1Password secrets management, helping to ensure secure practices are consistently followed across the team.

In the words of 1Password, “This gives teams a clean path to adopt AI-powered development while maintaining a strong security posture.”

Cursor Hooks allow teams to configure a file called hooks.json at the project, user, or system level. The file defines what should happen at specific lifecycle stages during an AI-assisted interaction.

From today with 1Password, Cursor users can use 1Password as a secure credential store for AI-driven tasks in Cursor, configure Cursor Hooks that validate required .env files managed by 1Password at runtime, version control hooks and enable AI-powered development in Cursor without changing existing 1Password policies, vaults, or user permissions.

In the coming months, the two companies plan to expand integration to support richer policies and permissions, broader support for Model Context Protocol integrations, automated secret rotation and enhanced visibility.

“Our goal is to create the first AI-native development environment where secure access is not an afterthought but a built-in part of the workflow,” added 1Password.

Image: News/Ideogram