Cursor · Docs

Cursor Docs

September 1, 2026 at 4:20 PM UTC

Expanded Organization Admin API docs for Organization Groups (Enterprise only): every group route needs the members:* scope, 20 requests/minute per organization, shared error responses (including 429 with Retry-After: 60), and SCIM-synce…

Changelog

Organization Admin API & Enterprise

Expanded Organization Admin API docs for Organization Groups (Enterprise only): every group route needs the members:* scope, 20 requests/minute per organization, shared error responses (including 429 with Retry-After: 60), and SCIM-synced groups reject member add/remove with 400.
Organization Groups now documents create, list, update, and delete via the Organization API, plus member list/add/remove for manual groups.

API

API overview rate-limit guidance now applies per authenticated user, team, or organization (most limits per endpoint); default is 20 requests/minute unless an endpoint says otherwise. Organization API most endpoints are listed at 20/minute per endpoint. Admin and Organization API 429 bodies are documented as { "code": "error", "message": "Rate limit exceeded" } with Retry-After: 60.

Origin API

Origin API protocol notes: REST responses keep default-valued fields (false, 0, "", []) instead of omitting them; optional fields stay absent when unset.
New webhook events: repository.created, repository.deleted, and repository.metadata.updated. installation.updated also fires when the owner namespace slug changes. repository.deleted is delivered for GitHub-mirrored repos when sync stops.
Origin API changelog (September 1, 2026): reviewer users include email on requested-reviewer surfaces and related webhooks; OpenAPI operations get unique operationIds (dual URL shapes use a _2 suffix—regenerate clients from the spec).

Grok Bot

Grok Bot for teams adds Architecture (cloud computer-use agent, dedicated Firecracker microVMs), Roll out Grok Bot, and Security section framing for evaluating access and retention controls.

All Cursor Docs releases

Cursor Docs

Cursor · Docs

Cursor Docs

September 1, 2026 at 4:20 PM UTC

Changelog

Organization Admin API & Enterprise

Expanded Organization Admin API docs for Organization Groups (Enterprise only): every group route needs the members:* scope, 20 requests/minute per organization, shared error responses (including 429 with Retry-After: 60), and SCIM-synced groups reject member add/remove with 400.
Organization Groups now documents create, list, update, and delete via the Organization API, plus member list/add/remove for manual groups.

API

API overview rate-limit guidance now applies per authenticated user, team, or organization (most limits per endpoint); default is 20 requests/minute unless an endpoint says otherwise. Organization API most endpoints are listed at 20/minute per endpoint. Admin and Organization API 429 bodies are documented as { "code": "error", "message": "Rate limit exceeded" } with Retry-After: 60.

Origin API

Origin API protocol notes: REST responses keep default-valued fields (false, 0, "", []) instead of omitting them; optional fields stay absent when unset.
New webhook events: repository.created, repository.deleted, and repository.metadata.updated. installation.updated also fires when the owner namespace slug changes. repository.deleted is delivered for GitHub-mirrored repos when sync stops.
Origin API changelog (September 1, 2026): reviewer users include email on requested-reviewer surfaces and related webhooks; OpenAPI operations get unique operationIds (dual URL shapes use a _2 suffix—regenerate clients from the spec).

Grok Bot

Grok Bot for teams adds Architecture (cloud computer-use agent, dedicated Firecracker microVMs), Roll out Grok Bot, and Security section framing for evaluating access and retention controls.

All Cursor Docs releases