Cursor Integration

Configuring Cursor Proxy via Witness Anywhere

Zscaler Integration: Cursor HTTP/1.1 Downgrade Configuration

Overview

1. Create a custom URL category listing Cursor domains.
2. Add a new SSL/TLS inspection rule that references that category, sits above the existing inspect rule for WitnessAI traffic, and has Enable HTTP/2 turned Off.

Prerequisites

• URL category: Witness-Cursor-H1-Downgrade
• SSL/TLS Inspection Policy: H1-Downgrade-Cursor

Part A — Create a custom URL category

1. Navigation: Administration → URL Categories → + Add URL Category
2. Click + Add URL Category.

1. Name: e.g. Witness-Cursor-H1-Downgrade.
2. URL Super Category: Information Technology.
3. Under URLs Retaining Parent Category, click Add Items and copy paste the block of URLs provided below:

.cursor.com
.cursor.sh
.cursor.so

4. Click Save.

Part B — Create SSL/TLS inspection rule (HTTP/2 disabled)

1. Navigation: Policy → SSL Inspection → SSL/TLS Inspection Policy tab → + Add SSL/TLS Inspection Rule

2. Rule Order: Make sure that it’s above the existing SSL/TLS inspection Rule for WitnessAI traffic
3. Rule Name: e.g. H1-Downgrade-Cursor.
4. Rule Status: Enabled.
5. Criteria → URL Categories: Select your category from Part A (e.g. Witness-Cursor-H1-Downgrade).

6. Action: Inspect (required for WitnessAI to see decrypted Cursor traffic).
7. Enable HTTP/2: Off (disabled). This forces HTTP/1.1 for matching Cursor domains—the core of this guide.
8. Align other action fields with your existing inspect rule.
9. Description (optional): e.g. WitnessAI Cursor — HTTP/1.1 for SSL inspection compatibility.
10. Click Save.

Witness Anywhere Integration: Cursor HTTP/1.1 Downgrade Configuration

Overview

What changes on the endpoint

Note on end-user override behavior:

New Witness Anywhere customers

Windows

$disableCursorHttp2 = $true  # Change from $false to disable HTTP/2 on Cursor

macOS

disableCursorHttp2="true"   # Change from "false" to disable HTTP/2 on Cursor

Tanium

[int]$DisableCursorHttp2 = 1   # 1 = disable Cursor HTTP/2, 0 = leave unchanged

After upload

Existing Witness Anywhere customers

1. Select the script corresponding to the Operating System.
1. Windows

# WitnessAI — Disable Cursor HTTP/2 (Windows)

Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process -Force

$logFilePath = "C:\Windows\Temp\witnessai-disable-cursor-http2-log.txt"
Start-Transcript -Path $logFilePath

function Disable-CursorHttp2 {
    param([string]$username)

    $settingsDir  = "$env:SystemDrive\Users\$username\AppData\Roaming\Cursor\User"
    $settingsFile = Join-Path $settingsDir "settings.json"

    try {
        if (-not (Test-Path $settingsDir))  { New-Item -Path $settingsDir -ItemType Directory -Force | Out-Null }
        if (-not (Test-Path $settingsFile)) { '{}' | Set-Content -Path $settingsFile -Encoding UTF8 }
        $raw = Get-Content -Path $settingsFile -Raw -ErrorAction Stop
        if ([string]::IsNullOrWhiteSpace($raw)) { $raw = '{}' }
        $json = $raw | ConvertFrom-Json
        if ($null -eq $json."cursor.general.disableHttp2") {
            $json | Add-Member -NotePropertyName "cursor.general.disableHttp2" -NotePropertyValue $true -Force
        } else {
            $json."cursor.general.disableHttp2" = $true
        }
        $json | ConvertTo-Json -Depth 10 | Set-Content -Path $settingsFile -Encoding UTF8
        Write-Output "Cursor HTTP/2 disabled for '$username'"
    } catch {
        Write-Output "Failed to disable Cursor HTTP/2 for '$username'"
        exit 1
    }
}

$loggedInUser = (Get-WmiObject -Class Win32_ComputerSystem).UserName.Split('\')[-1]

if (-not $loggedInUser) {
    Write-Output "No user is currently logged in."
    Stop-Transcript
    exit 1
}

Disable-CursorHttp2 -username $loggedInUser

Stop-Transcript
exit 0

#!/bin/bash

# WitnessAI — Disable Cursor HTTP/2 (macOS)



set -euo pipefail

LOG_FILE="/tmp/witnessai-disable-cursor-http2.log"

exec >>"$LOG_FILE" 2>&1
echo "**************** WitnessAI disable Cursor HTTP/2 at $(date '+%Y-%m-%d %H:%M:%S') ****************"

current_user=$(stat -f %Su /dev/console)
if [[ -z "$current_user" || "$current_user" == "root" || "$current_user" == "loginwindow" ]]; then
    echo "No interactive user logged in; skipping Cursor HTTP/2 disable"
    exit 0
fi

if sudo -u "$current_user" defaults write com.todesktop.230313mzl4w4u92 NetworkDisableHttp2 -bool true; then
    echo "Cursor HTTP/2 disabled for '$current_user'"
    exit 0
else
    echo "Failed to disable Cursor HTTP/2 for '$current_user'"
    exit 1
fi

2. Upload the appropriate script to your MDM provider.
3. Deploy as a one-time script in the same execution context as your other Witness Anywhere MDM scripts (typically root on macOS, SYSTEM on Windows).
4. Ensure an interactive user is logged in when the script runs; otherwise it exits without changes.

Script logs