Data Connections

Connecting a Cursor account

Connect your Cursor team to DigiUsher with a Team Admin API key to track usage-based AI coding spend per developer and per model.

Overview

To connect your Cursor team to DigiUsher, create a Team Admin API key in the Cursor dashboard. Then enter that key in DigiUsher. This page gives the access that DigiUsher asks for, the reason for that access, and the credential that you enter.

A Cursor team is required

This feature does not work with an individual account. You need a Cursor Team plan, which Cursor called Business before, or a higher plan. At least one member must have the Team Admin role. The individual plans, Free and Pro, give no access to the Admin API.


Summary of Access Required

ComponentDetails
IdentityTeam Admin API key (prefix crsr_) for programmatic access only
Access levelRead-only. Team roster and usage-based cost data
DataDaily usage and cost data
ScopeA single Cursor team. The key carries its own team scope
CapabilityWhat It Provides
Billing dataCost analytics, chargeback and showback, budgeting, forecasting, anomaly detection
Per-user attributionCursor spend attributed to each team member
Model breakdownCost split by model and token usage

DigiUsher cannot send requests, cannot consume tokens, and cannot create, change, or delete anything in your Cursor team.


Prerequisites

Information to Gather

ItemHow to FindDigiUsher Field
Team Admin API KeyCursor dashboard > Settings > Advanced > API Keys > create a Team Admin API key. The page shows the key one time only, so save it in a safe place.api_key

Roles Required by the Person Performing Setup

Role / PermissionWhy
Team Admin on the Cursor teamOnly team admins can create Team Admin API keys.

Network & Email Access (For Regulated Environments)

If your organization restricts outbound internet access or email domains, make sure that these two items are in place before you start:

  • Domain allowlist. Add *.digiusher.com to the allowlist of your network and your firewall. The users of your organization can then open the DigiUsher platform in their browsers.
  • Email allowlist. Add digiusher.com as a permitted sender domain in your email security gateway. DigiUsher sends onboarding confirmations, alerts, and reports from @digiusher.com addresses.

Setup

Make Sure You Have a Team and Admin Access

The Admin API works at the level of the team. You must therefore work in a Cursor team and have the Team Admin role.

  1. Sign in to the Cursor dashboard with an account that has the Team Admin role.
  2. Make sure that you work in a Cursor Team plan, and not in an individual plan.
  3. Make sure that your role is Team Admin. If it is not, ask a team admin to give you the role, or to do the next step for you.

Don't see API Keys?

If the API Keys option does not appear under Settings > Advanced, your account does not have a Team plan or a higher plan, or you do not have the Team Admin role.

Create a Team Admin API Key

Create a separate Team Admin API key for DigiUsher. DigiUsher uses this key for read operations only.

  1. In the Cursor dashboard, open Settings > Advanced > API Keys.
  2. Create a new Team Admin API key. Give it a name that you know again, for example digiusher-cost-reader.
  3. If the dialog has a scope control, select Read-only.
  4. Copy the value of the new key. It starts with crsr_.

Save your credential

CAUTION: Copy the Team Admin API key now and save it in a safe place. The page shows the key one time only, and you cannot read it again. You enter this key in DigiUsher in the next section.


Connect in DigiUsher

In DigiUsher, go to Connectors > Add Source and select Cursor. On the Configure step, enter the values in the table. Then go to Connect and click Connect source:

FieldWhere to Find
Display NameAny label you prefer, for example Cursor Engineering
Team Admin API KeyThe crsr_... key from Step 2

At the connection, DigiUsher makes sure that the key works with the roster of your Cursor team, and it finds your team members. It can then attribute the cost to each user. The first sync reads the usage-based cost of the last 3 calendar months: the current month and the two months before it. Every sync after the first one reads only the last 7 days of completed usage. DigiUsher therefore gets the recent corrections, and it does not read the whole month again.


Setup Checklist

  • You work in a Cursor team, and not in an individual plan
  • You have the Team Admin role on the team
  • Team Admin API key created in the Cursor dashboard with the prefix crsr_
  • Team Admin API key saved in a safe place
  • Connection details entered in DigiUsher
  • *.digiusher.com in the allowlist of your network and firewall (if your organization restricts this)
  • digiusher.com in the allowlist of permitted sender domains in your email security gateway (if your organization restricts this)

Security

What DigiUsher CAN Access (Read-Only)

  • The roster of your Cursor team, which DigiUsher uses to attribute the cost to the correct user
  • The usage-based cost data of each user for each day, with the model and the token usage
  • The email address of the member on each usage event. DigiUsher stores it as the resource identifier of that spend

What DigiUsher CANNOT Do

  • Send a request or consume tokens in your Cursor team
  • Create, change, or delete an API key, a team member, or a team setting
  • Read your source code, prompts, completions, chat history, or repositories
  • Read or change the billing configuration, the payment methods, the seat counts, or the plan limits
  • Buy a product or change your account

DigiUsher stores the Team Admin API key encrypted, and it never returns the key in an API response.

Member email addresses are stored

DigiUsher stores the Cursor member email of each usage event as the resource identifier of that cost. It can then attribute the spend to a person in the cost reports and in the chargeback. A row from a service account, a cloud agent, or an automation gets that resource type in place of User.

Monitoring

Open the API keys in the settings of your Cursor team to see the keys that exist and the last time each key was used. Delete every key that you do not know.

Credential Rotation

  1. In the Cursor dashboard, create a new Team Admin API key.
  2. Enter the new key in DigiUsher immediately.
  3. Delete the old key in the Cursor dashboard.

Avoid ingestion gaps

Create the new key and enter it in DigiUsher before you delete the old key. This prevents an interruption of the data collection.

Revocation

Delete the Team Admin API key in the settings of your Cursor team. Cursor then immediately invalidates the key and stops all access. DigiUsher cannot read cost data again until you give it a new key.


Troubleshooting

Invalid Cursor API key or insufficient permissions

  • Make sure that the key starts with crsr_. A personal key does not work, and a key without admin rights does not work.
  • Make sure that a member with the Team Admin role created the key, and that the key still exists in the Cursor dashboard.
  • Create the key again in the Cursor dashboard and enter it again in DigiUsher.

Cursor API rejected the verification request

  • Make sure that the key is still active and not revoked.
  • Make sure that your team has a Cursor Team plan or a higher plan. The Admin API needs this plan.

Could not reach the Cursor API

  • This is usually a temporary network fault. Try the connection again.
  • If the fault continues, make sure that your network policy does not block the outbound access to api.cursor.com.

No cost data appearing

  • If your team used Cursor in no part of the period, DigiUsher has no cost data to show.
  • DigiUsher reads only completed UTC days. The usage of today therefore appears at a later sync.

Need Help?

If this page does not answer your question, write to DigiUsher support at support@digiusher.com. The team will help you.

On this page