OIDC tokens: Docs now cover minting short-lived JWTs from the machine where the agent runs (Cursor-managed VMs and self-hosted workers), clarify CURSOR_AGENT_SOCKET behavior per runtime, and list supported sub_claim names: team_id, organ…
Changelog
Cloud Agents
OIDC tokens: Docs now cover minting short-lived JWTs from the machine where the agent runs (Cursor-managed VMs and self-hosted workers), clarify CURSOR_AGENT_SOCKET behavior per runtime, and list supported sub_claim names: team_id, organization_id, and environment_id.
My Machines: Added guidance for enabling identity token minting on claimed agents with --identity-socket (sets CURSOR_AGENT_SOCKET).
Pool workers: Clarified the --identity-socket flag: serves a per-claim OIDC token socket and sets CURSOR_AGENT_SOCKET in claimed agent shells (off by default).
