Xona is now a Cursor plugin
Give Cursor's agent its own wallet. Discover 20k+ paid APIs, pay per call with x402 and USDC, and run paid security scans on the repo you're in, without leaving the editor. Now listed on cursor.directory.
Cursor 2.5 introduced plugins: a single install that bundles skills, rules, and MCP servers into the editor. It is the cleanest distribution surface an agent tool has had so far, and it lands exactly where the agent economy is actually being built.
So we shipped one. Xona is now a Cursor plugin, listed on cursor.directory, open source at github.com/xona-labs/xona-cursor.
Install it and the agent sitting in your editor gets its own wallet. It can find a paid API, pay for one call in USDC, and hand you back the result. No API keys, no signup, no payment plumbing to write first.
What ships in the plugin
| Component | What it does |
|---|---|
| MCP server | The full xpay toolset: xpay_discover, xpay_use, xpay_do, xpay_balance, xpay_transfer, xpay_swap, xpay_trade, zauth repo scans, X data, AgenC marketplace hires. |
xona skill | Teaches the agent the discover, pay, result flow, plus payment routing, escrow hires, and the safety model. |
xona-integrate skill | Teaches the agent to add payments to your projects with the TypeScript SDK (createXPay, forClaude / forOpenAI / forGemini). |
xona-status skill | Wallet balances, addresses, spending caps, recent spend, at a glance. |
xona-reposcan skill | A paid (~$0.05) security scan of the repo you have open: secrets, injection risks, dependency issues. |
| Spend-safety rule | Always on. Paid tools require explicit approval, free lookups are preferred, guardrail blocks are surfaced and never routed around. |
Everything is declared the way the plugin spec expects, so Cursor picks it up on install: .plugin/plugin.json for the manifest, mcp.json for the server, skills/ for the skills, rules/ for the always-on rule.
Install it
- Open the Xona listing on cursor.directory.
- Click the download button at the top of the page to install it into Cursor.
- That is it. The MCP server, the four skills, and the spend-safety rule all land together.
Want just one piece of it? Every rule, MCP server, and skill on the listing has its own Add to Cursor button, so you can take the spend-safety rule or a single skill without the rest.
Prefer to read the source before you run it? It is MIT licensed on GitHub, and you can drop the repo into ~/.cursor/plugins/local/ to run it unpublished.
Zero-config wallet
On first run the MCP server generates a wallet for the agent and persists it under ~/.xpay. Ask the agent for its wallet status and it tells you the Solana address. Fund that address with USDC and every paid tool works.
No API key. No account. No signup flow that an autonomous agent cannot complete anyway.
Already have a wallet? Set XPAY_SOLANA_SECRET (base58) in the server's env and it uses that instead. To disable auto-generation entirely, set XPAY_NO_AUTO_WALLET=1.
Spending is capped below the model
An agent with a wallet is only useful if it cannot drain that wallet. So the limits do not live in the prompt, they live under it.
Per-transaction and per-day USD caps, plus an optional allowed-host list, are enforced before any signature is produced. A confused model, or a prompt-injected one, cannot exceed them by arguing with itself. On top of that, the bundled spend-safety rule makes the agent quote you the price and get an explicit yes before any paid call.
Free lookups stay free. xpay_discover, xpay_balance, xpay_report, xpay_trade_quote, and the trending and token-info tools cost nothing, and the rule tells the agent to answer from those first and only escalate to a paid call when you actually asked for the result.
Try it
Once installed, these all work in a normal Cursor chat:
- "What's trending on Robinhood Chain?" Free market data, no payment.
- "Find me a paid image generation API and show prices." Catalog discovery across 20k+ services.
- "Show me the agent wallet status." Balances, address, caps, recent spend.
- "Run a Xona security scan on this repo." This is the demo worth doing first. It is a real x402 micropayment, about five cents, that buys a security scan of the repo you are sitting in, and returns findings grouped by severity with fixes the agent offers to apply.
That last one is the whole thesis in one command. The agent decides it needs a service, pays for it out of its own wallet, and gives you the output. The payment is a detail, not a project.
Why the editor
Most agentic commerce demos live in a sandbox. The editor is different: it is where agents are actually written, and where the person writing them can watch a payment happen and decide whether they trust it.
That makes Cursor the right place to put a wallet. A developer building a payments-enabled agent can, in the same session, see x402 work on a live service, ask the xona-integrate skill to wire the SDK into their own codebase, and ship. Discovery, spend, and integration collapse into one loop.
Cursor plugins are also the first distribution channel where an MCP server, the skills that teach an agent to use it, and the rules that keep it safe travel together as one artifact. A wallet needs all three. Shipping the tools without the guardrails would have been the wrong move.
What's next
The plugin tracks @xona-labs/xpay, so new networks, new tools, and new marketplaces land in Cursor as they land in the SDK. Robinhood Chain, Base, and Solana routing are live today, with more facilitators in the pipeline.
Install it, fund it with a couple of dollars, and let your agent buy something.
👉 Get the plugin on cursor.directory · Source on GitHub · xpay docs