API reference

Authentication

The web app authenticates via the sign-in flow. The server sets an auth_token cookie that’s automatically included in subsequent requests.

IDEs use personal API keys. Create one in Settings, then send Authorization: Bearer sak_… to the MCP endpoint. See Connect to Cursor.

Remote MCP server (Streamable HTTP). Bearer API key required. Tools: list_agents, create_agent, run_task, get_task, get_screenshot, send_message, stop_task, get_balance. Usage bills the wallet like the web app.

Endpoints

Get a nonce for wallet sign-in.

{ "walletAddress": "..." }

Sign in with a signed message.

{ "walletAddress": "...", "signature": "...", "message": "..." }

List personal API keys (hash metadata only). Cookie auth.

Create a named key with an optional spend cap. The secret is returned once.

{ "name": "Cursor", "spendLimitSol": 0.05 }

Revoke a key. Existing hashes stay; the secret stops working.

Get account info and balance.

Verify a deposit transaction.

{ "signature": "..." }

Withdrawable balance, reserved running-agent cost, limits and withdrawal history.

Debit unused balance and pay it to the signed-in wallet. requestId is a client UUID; retries with the same id return the original withdrawal.

{ "requestId": "2c7e0b1a-4d3f-4b8e-9a11-0f3d2c1b0a99", "amount": "1000000" }

Approve or reject a held withdrawal. Header Authorization: Bearer WITHDRAW_ADMIN_SECRET.

{ "action": "approve" }

List active sessions.

Create a new session.

Destroy a session.

Rename an agent or change its default model. Body: { "name", "model" }.

Enqueue a background task. Returns 202 with the job. The loop keeps running if the client disconnects.

{ "message": "..." }

Poll chat, tool events and job status. Use full=1 for the transcript or after=n for new events.

List durable notes the agent saved for this session.

Clear that agent’s memory.

Recent completion notices. Add unread=1 to list only unseen ones.