Skip to content

Cursor BYOK provider billing

Cursor BYOK contributes provider billing and usage-export rows for AI API usage that originates from Cursor-managed bring-your-own-key workflows.

Release state

This guide documents the read-only cursor_byok connector implemented in the platform connector surface.

Required access

The names below are Venturi manifest capabilities, not provider scopes:

Venturi capability Purpose
provider_billing.readonly Read provider billing export rows.
provider_usage_metadata.readonly Read usage metadata needed for attribution context.

Do not grant key creation, key deletion, spend-limit mutation, or provider administration scopes.

The vendor-side authorization is the read-only billing export or usage-report mechanism of each provider account used by Cursor BYOK. Supported sources are the provider billing adapters named in your onboarding manifest; an unlisted source is not implied to work. Cursor’s separate Admin API can supply team usage and spending context but is not substituted for the provider bill. Record the provider and its official billing-export documentation in the connector configuration; Venturi does not ask you to paste the capability names above into Cursor or a provider console.

Setup

  1. Enable provider billing exports for the Cursor BYOK provider accounts.
  2. Create a read-only integration credential for those exports.
  3. Store the credential reference in Venturi.
  4. Set VENTURI_CURSOR_BYOK_LOOKBACK_HOURS if you need a poll window other than 24 hours.
  5. In Venturi, open Integrations and select Cursor BYOK and run Test connection.

Verification

  • Provider billing rows appear in the latest sync.
  • Usage metadata identifies the API product or service name where the provider exposes it.
  • A provider row qualifies only when its user-agent metadata begins Cursor/; otherwise it remains ordinary provider usage.
  • Cursor BYOK usage joins to owner or team context only where matching evidence exists.
  • The read-only inventory test confirms no credential can create, rotate, or revoke provider keys.

Rotation and offboarding

Rotate the export credential on the provider account schedule. Removing the connector stops new Cursor BYOK billing correlation.