MCP server for Cursor subagent plugin providing session management and prompt handling for AI agent interactions
This server has 13 tools with basic naming (verb_noun pattern mostly followed) but critical gaps in descriptions and schemas. Most tool descriptions are present but generic (10-50 chars), falling below the 50-200 char LLM-optimized baseline. Input schemas exist but lack depth: parameters have minimal descriptions, no enums for constrained values (e.g., 'mode', 'decision'), and no documented output schemas. Error handling is absent, no recovery guidance, no categorization of retryable vs fatal errors. The server manages cursor sessions but provides no guidance on when to use each tool or how they compose. Security concerns: no visible permission checks, audit logging, or input validation. Overall, definitions are skeletal, sufficient to invoke but insufficient for reliable LLM reasoning.
Grant or deny permission for an action during a cursor session turn
Accept or reject a plan proposed during a cursor session turn
Answer a question posed during a cursor session turn
Cancel an active cursor session turn or operation
Close an active cursor session
Delegate execution to the cursor agent for tool invocation
Read the final result of a completed cursor session turn
No output schemas documented. Tools return results but LLMs cannot predict field names, types, or structure. Downstream tool chaining is impossible without trial-and-error.
Constrained parameters lack enums. 'mode' (e.g., 'agent') and 'decision' (e.g., 'accept'/'reject') accept free-form strings. LLMs will hallucinate invalid values.
Descriptions are generic and under 50 chars (baseline 50-200). E.g., 'Resume an existing cursor session' provides no context on when to call it vs start_session or when it fails.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 44 | 2026-07-28+ | v2 |
Resume an existing cursor session
Send a prompt to an active cursor session and receive a turn response
Get the current status of a cursor session
Change the mode of an active cursor session
Start a new cursor session with specified working directory and mode
Wait for events or changes in a cursor session with optional timeout
No error handling guidance. Tools do not document what errors are retryable, what user action is needed, or how to recover. LLMs cannot self-correct.
cursor_delegate has minimal description (15 chars) and no visible schema. Its purpose and parameters are opaque.