Cursor 101

Finish line: Cursor audits a dependency from your actual project — live advisories, maintenance signals, supply-chain risk — instead of vibes from training data. About 10 minutes.

① The hook (do this first, before connecting)

In Cursor’s chat, ask about a dependency you actually use:

Is the npm package express safe to depend on right now?

Without live data, the answer is generic security prose from training — no current advisories, no recent release activity, nothing dated. Keep it for step ④.

② Connect — one click

Paste this in your browser (or click it from pipeworx.io/install) and Cursor installs the server:

cursor://anysphere.cursor-deeplink/mcp/install?name=pipeworx&config=eyJ1cmwiOiJodHRwczovL3BpcGV3b3J4LmlvL21jcCJ9

(That config= blob is just base64 of {"url":"https://pipeworx.io/mcp"} — the anonymous endpoint. Manual alternative: add that URL to .cursor/mcp.json.)

Reload Cursor.

③ Checkpoint

Settings → MCP shows pipeworx with a green dot and roughly 38 tools. The hero tool ask_pipeworx routes to the full catalog of 5,303 tools across 1,392 sources at runtime.

④ The finish line

Same question, routed through live data:

Using Pipeworx, is the npm package express safe to depend on right now?

Cursor calls the dependency-safety tooling and returns current registry facts: release recency, maintenance signals, known advisories, supply-chain risk indicators — dated, sourced, and about the version that exists today. Compare with step ①.

Then point it at your own project:

Using Pipeworx, check the riskiest-looking dependency in my package.json.

Two more worth trying:

Using Pipeworx, what are current 30-year mortgage rates?

Using Pipeworx, get Apple’s latest 10-K revenue figure.

⑤ Graduate

Make it automatic: add the rule file at .cursor/rules/pipeworx.mdc (the plugin ships it for you) — Cursor then reaches for live data without the “Using Pipeworx” prefix.
Real jobs, ready to paste: recipes — dependency screens, company research, market data.
Hitting the 50/day anonymous cap? Sign up free for 200/day and append ?apikey=YOUR_KEY to the URL.