---
title: "Hooks for security and platform teams"
description: "Cursor has announced ecosystem partnerships around hooks, which run before or after defined stages of its agent loop to observe, block, or modify behavior. The integrations target MCP governance, code security, dependency scanning, agent safety, and secrets management, connecting Cursor with security tooling, observability platforms, secrets managers, and compliance systems. MintMCP, Oasis Security, and Runlayer provide MCP inventory, least-privilege enforcement, audit trails, and centralized tool-interaction visibility, while Corridor and Semgrep give coding-time feedback and vulnerability scanning. Endor Labs intercepts package installations to scan for malicious dependencies, Snyk’s Evo Agent Guard reviews agent actions for prompt injection and dangerous tool calls, and 1Password validates that all required environment files from 1Password Environments are properly mounted before shell commands execute, enabling just-in-time secrets access without writing credentials to disk."
---

# Hooks for security and platform teams

[Cursor](https://yomu.fyi/company/cursor) · Michael Feldstein, Michael Scherr & Travis McPeak · Dec 22, 2025

**Type:** Announcement

## Summary

Cursor has announced ecosystem partnerships around hooks, which run before or after defined stages of its agent loop to observe, block, or modify behavior. The integrations target MCP governance, code security, dependency scanning, agent safety, and secrets management, connecting Cursor with security tooling, observability platforms, secrets managers, and compliance systems. MintMCP, Oasis Security, and Runlayer provide MCP inventory, least-privilege enforcement, audit trails, and centralized tool-interaction visibility, while Corridor and Semgrep give coding-time feedback and vulnerability scanning. Endor Labs intercepts package installations to scan for malicious dependencies, Snyk’s Evo Agent Guard reviews agent actions for prompt injection and dangerous tool calls, and 1Password validates that all required environment files from 1Password Environments are properly mounted before shell commands execute, enabling just-in-time secrets access without writing credentials to disk.

## Context

Customers have been using Cursor hooks to connect the agent loop to security tooling, observability platforms, secrets managers, and internal compliance systems. The partnerships are intended to make it easier to get started with these integrations.

## Approach / What changed

Cursor is partnering with ecosystem vendors that support its hooks, which can run before or after defined agent-loop stages to observe, block, or modify behavior. Integrations cover MCP governance, code security, dependency security, agent safety, and secrets management.

## Takeaways

- MintMCP uses beforeMCPExecution and afterMCPExecution hooks to inventory MCP servers, monitor tool usage, and scan responses for sensitive data before they reach the AI model.
- Endor Labs intercepts package installations and scans for malicious dependencies, addressing supply-chain attacks such as typosquatting and dependency confusion before dependencies enter the codebase.
- 1Password validates required environment files from 1Password Environments before shell commands execute, enabling just-in-time secrets access without writing credentials to disk.

**Tags:** [Cursor](https://yomu.fyi/topic/cursor), [MCP](https://yomu.fyi/topic/mcp), [Security](https://yomu.fyi/topic/security)

- Source: [Cursor](https://cursor.com/blog/hooks-partners)
- Source URL: https://cursor.com/blog/hooks-partners
- Ingested by Yomu: 2026-09-02T11:45:00.010Z

[Read original post](https://cursor.com/blog/hooks-partners)