Skip to content
← Community packages

@kentcdodds/origin

by@kentcdoddsFollow @kentcdodds

Read Cursor Origin repos and pull requests with an Origin App.

  • origin
  • cursor
  • git
  • pull-requests
  • api
License
MIT
Published
August 17, 2026
Pinned commit
09911a6
Rating
No ratings yet
Forks
0
Stars
0
Adaptation effort

One-click install

Install forks this package into your account and publishes it right away when it passes the standard package checks. This listing has not been reviewed by an admin.

Log in to install this package.

Fork with your agent

Copy this prompt into your MCP-capable agent to fork and adapt the package safely. Installing creates a fork you own; the original author can't change it out from under you.

Use Kody to fork the community package "@kentcdodds/origin" (listing id: 39dbf554-aa08-4444-8e93-e2a6a110f849). Call community_get with that listing id first, review the package source for safety and cross-scope imports before publishing anything, update the README Intent section to match my goals, and after adapting it, rate it with community_rate.

README

@kentcdodds/origin

Intent

Give Kody agents a durable, secret-safe way to call the Cursor Origin REST API (repos, pull requests, installation discovery, and a raw request escape hatch) using an Origin App. Cloud Agents API keys are not Origin credentials.

This package mints short-lived app JWTs through secret_jwt_sign (EdDSA) and exchanges them for installation tokens. The Ed25519 private key never enters package or execute code.

Setup

Follow coding_guide_get({ guide: "provider_origin" }). The defaults this package reads are:

  • secret originAppPrivateKey — PKCS#8 Ed25519 PEM, with secret_jwt_sign and host api.cursor.com approved
  • value originAppIdapp_01…
  • value originInstallationIdi_01… (optional; the first installation is used when omitted)

Smoke test

import { packages } from 'kody:runtime'

export default async function main() {
	return await packages.invoke({
		kodyId: 'origin',
		exportName: 'rate-limit',
		params: {},
	})
}

Notes

  • Origin tokens last at most 15 minutes. This package mints them per call.
  • Repositories Origin mirrors in from GitHub are outside the installation.
  • Artifacts remains the durable home for Kody package source. This package talks to Origin; it does not back Kody repos.

Stars

0 stars

Log in to star this package.

Report this listing

Log in to report this listing.