Cursor's latest release puts your local agents on your iPhone

On October 6, 2026, Cursor shipped remote control for local agents. You can now view and reply to agents running on your own computer from the Cursor iOS app. It's the newest entry in Cursor's changelog. It also caps a month in which Cursor kept adding ways to run, coordinate and supervise agents rather than features for writing code by hand.

What's new: remote control for local agents

According to Cursor's changelog, setup takes three steps. You download the iOS app and sign in, and your computers appear automatically. Then you tap a computer and approve the pairing request in the Cursor desktop app. After that, your local agents show up in a list on your phone, where you can check their progress or send them messages.

The key detail is that nothing moves. "Remote control doesn't move your agents anywhere," Cursor says. They keep running on your machine, with your files, your environment and your credentials. That has two consequences:

• Your computer has to stay on and online. A "Keep this computer awake" option sits under Remote Control in the desktop settings. Cursor says the machine must be plugged in with the lid open for it to work.
• It doesn't need cloud agents. Remote control works with purely local sessions.

Remote control is on by default for everyone except Enterprise organizations. Enterprise admins can turn it on in Org settings › Security and identity › Remote control. The changelog mentions only iOS, not Android.

Teams that keep sensitive work off Cursor's cloud should note the default. The feature adds a new way to reach an agent with access to a developer's machine, and individual and Teams accounts get it without an admin decision.

Which version is this?

Cursor's changelog no longer labels entries with version numbers, so the version is harder to pin down than it used to be. On October 8, and again on October 9, Cursor's download page listed version 3.23 as the latest build, without a release date. Community trackers that watch Cursor's update feed first recorded a 3.23 build (3.23.12) on October 2 and 3.23.23 on October 6. Those are third-party first-seen dates, not official release dates.

The month before: from editor to agent manager

Remote control lands on top of four September releases that matter more for how teams use Cursor:

Projects (beta, September 10). Projects is for longer work such as a feature, a migration or a full app. A coordinator agent plans the work and hands it to implementing agents, and Cursor says the coordinator "doesn't write code itself". Each Project runs on its own cloud computer, so it keeps going when your laptop is closed. It starts a local agent when something has to be tested on your machine. Shared context files sync across every machine the Project's agents use. Projects can also subscribe to a Slack channel, a schedule or your pull requests and act without a prompt. Cursor said Projects was rolling out to all users but didn't say which plans include it or how it affects usage.

Rollouts and Security Review (September 23, Teams and Enterprise). Both are pull-request bots for the last mile of shipping. Rollouts writes a monitoring plan on each PR and then watches the change as it deploys, checking logs, metrics and traces per environment. It labels each deploy verified healthy, regression detected or inconclusive. On a regression it can open a revert PR or hand the finding to a cloud agent. Cursor stresses that it "does not merge or roll back on its own today." Security Review posts one comment per PR about exploitable bugs, including injection, authentication and authorization bypasses, exposed secrets, SSRF, unsafe deserialization and vulnerable dependencies. Style issues stay with Bugbot. Cursor gave teams 10 days of included credits to try Rollouts, enough for roughly 50 changes on Teams and 500 on Enterprise. It didn't publish standard pricing.

Self-hosted machines (September 2). Agents can now run their tools entirely inside your own network, either on a single laptop or VM ("My Machines") or on autoscaling team pools. Cloud agents can also run on third-party sandboxes, including AWS Lambda, Coder, Cloudflare, Daytona, Modal, Namespace, Vercel and E2B. Self-hosted workers on Linux and Mac gained computer use, so they can click, type, take screenshots and drive a browser.

Leaner agent runs (September 23). In a blog post, Cursor engineers say harness changes cut users' token costs by 7% "without reducing agent quality." The changes included trimming about 66% of the system prompt, loading rarely used tools on demand and reducing cold cache misses by 20%. These are Cursor's own measurements.

Models: Grok first

On September 21, SpaceXAI released Grok 4.7 and said it was "available today in Cursor." SpaceXAI prices it from $2 per million input tokens and $6 per million output tokens, and claims gains over Grok 4.6 on benchmarks including CursorBench 4.0 (46.3% vs. 40.4%). Those figures are vendor-reported.

The model lineup reflects Cursor's ownership. On August 14, 2026, Cursor announced that it "has officially been acquired by SpaceX," completing a process that began in April with a partnership with SpaceXAI. Cursor's announcement doesn't give a price; Bloomberg Government and Techzine reported the deal at $60 billion. Cursor's pricing documentation now promises "significantly more included usage" for Grok 4.7, Grok 4.6, Grok 4.5 and Cursor's own Composer 2.5. Models from Anthropic, OpenAI and others remain available under the plans' general agent limits.

Pricing: unchanged

We found no pricing change announced alongside these releases.

Last verified: October 9, 2026 (Cursor pricing docs)

Cursor doesn't publish included usage in dollars or tokens. It says every plan "includes a set amount of model usage," with on-demand usage billed in arrears.

Why it matters

Cursor's last six weeks show where AI coding tools are heading. The bottleneck is less "can the model write this function?" and more "how do I run, watch and trust several agents at once?" Remote control, Projects, self-hosted pools and deploy-monitoring bots are all answers to that question. GitHub is moving the same way; see our report on Copilot's new computer use feature. For how Cursor's agent stacks up against Claude Code and Codex on features, prices and limits, read our three-way comparison. For the vocabulary, see what "agentic" really means.

Confirmed vs. uncertain

• Confirmed (Cursor, SpaceXAI): feature dates and descriptions, plan availability for Rollouts and Security Review, Grok 4.7 availability and API price, current plan prices.
• Uncertain: the official release date of version 3.23 (only community first-seen dates exist), which plans include Projects, and Rollouts' price after the trial.
• Confirmed (Cursor): the SpaceX acquisition, completed August 14, 2026.
• Reported: the $60 billion price, via Bloomberg Government and Techzine.

For Grok 4.7's launch in context, see The Week in AI #1.