Cursor 2.5: Plugins, Sandbox Controls, Async Subagents

TL;DR

• Cursor Marketplace launches with plugins from Amplitude, AWS, Figma, Linear, Stripe, and more
• Sandbox now supports granular network access controls and async subagents that run in parallel
• 16 improvements including sudo support, better CLI agent, and keyboard shortcuts

New

• Cursor Marketplace plugins — Package skills, subagents, MCP servers, hooks, and rules into single installs. Browse at cursor.com/marketplace or use /add-plugin in the editor.
• Sandbox network access controls — Define exactly which domains agents can reach: user config only, user config plus Cursor defaults, or allow all. Enterprise admins can enforce org-wide allowlists and denylists from the admin dashboard.
• Async subagents — Subagents now run asynchronously and can spawn their own subagents, enabling bigger tasks like multi-file features and large refactors without blocking the parent agent.
• Cloud Agent handoff in Plan mode — Choose "Build in Cloud" to hand off plan execution while you continue working locally or close your laptop.
• CLI agent sudo support — The Cursor CLI agent now handles password prompts inline for commands requiring elevated privileges.
• Sandbox defaults for common operations — git clone, npm install, and pip install now work out of the box; extend or override per-project.
• Keyboard shortcut for agent messages — Submit messages with ⌘+Enter (Ctrl+Enter) in agent conversations.
• Inline diff toggle — Turn inline diffs on or off in settings; diffs show only in review panel by default.
• Chat history search for agents — Agents can now search past conversations and use chat history as context.

Fixed

• Terminal tool calls no longer cause degraded performance.
• Keybinding behavior for Cmd+Opt Left/Right tab navigation fixed.
• Auto-run mode switching bug resolved.
• Project rules can now be created with no workspace open.
• Global ignore list now empty by default to fix sandboxing issues.
• Stopping parent agent now always stops child subagents.
• Ask mode now enforces read-only sandbox even with "Run everything" enabled.

Removed

• Dotfile Protection setting — removes unexpected approval prompts when agents edit dotfiles.
• Default Mode setting — each new agent conversation now begins fresh.
• Auto-Accept on Commit setting — pending diffs no longer auto-accept on commit.

Update Cursor to the latest version from the app or download at cursor.com.

Source: Cursor