MDM: Cursor and VS Code

Cursor and VS Code connect to TapPass through an editor setting (a custom OpenAI base URL and key). See the Cursor connect page for the manual setup.

• Distribute managed editor settings. You can push a managed settings.json (base URL and model selection) through Intune’s managed-app configuration or a configuration profile, so new machines come preconfigured for TapPass.
• Issue per-user keys. Give each developer their own TapPass key rather than a shared one. See three ingredients.

• A verified, read-only managed configuration that a developer cannot override from inside the editor, so the governed path is guaranteed rather than default.
• Exact Intune and Jamf payloads for Cursor and for VS Code.

Until then, treat managed settings as a strong default rather than a hard lock, and pair with a sandbox if you need a guarantee. See What TapPass can and cannot govern.