Cursor Computer Use: @-mention the test, and name the computer

Verdict, October 24, 2026. OP to @-mention Computer Use for one UI test you are watching, after you update. Cursor's example is the iOS Simulator. OP to put the clicks on a cloud agent's VM, or on a Mac or Linux worker you start with --computer-use, when you want the machine the docs describe. Mid to update because the posts said so and then leave. Those posts say Cursor uses Computer Use on its own when a task needs it, and they name no OS, plan, approval, or off switch. No letter moves on the AI Coding Agents board. S stays locked. Cursor stays in A. OP or Mid has not installed this build and has not watched the video on the post.

Read October 24, 2026. Behavior described below is a vendor claim.

The posts, and the notes that predate them

VENDOR CLAIM On October 23, 2026, Cursor posted: "Cursor can now control your computer. Agents can drive desktop apps like the iOS Simulator to test the features they build." The reply says agents click and type across any app, not just the browser, that Cursor uses it when a task needs it, and that you can @-mention Computer Use. Update to try it. Sources: first post (opens in a new tab), reply (opens in a new tab).

The marketing changelog's newest entry is October 16, 2026. It does not mention Computer Use. Source: changelog (opens in a new tab).

UPDATE Agents Window 3.27, dated October 22, 2026, does. "Fixes to Computer Use control" says Computer Use now keeps control with the turn that's running: a late end from an earlier turn or a subagent no longer releases control held by a newer turn or another agent, and a turn whose end was lost no longer keeps control. The download page labels 3.27 Latest for a desktop app on macOS, Windows, and Linux. That line is the app, not a Computer Use support list. Sources: 3.27 (opens in a new tab), download (opens in a new tab).

NERF Agents Window 3.24, October 9, 2026, already had an Enable Computer Use permissions window on macOS. The window no longer keeps reopening while permissions are missing, and Computer Use no longer gets stuck saying another Cursor window is installing it after a quit or crash mid-install. The note names macOS only, and it does not say what the window asks for. Source: 3.24 (opens in a new tab).

Three computers

Which computer	What a primary source says	How it starts
The one in the October 23 posts	Any app on your computer. The example is the iOS Simulator	Update Cursor. It runs when a task needs it, or you @-mention Computer Use
A cloud agent's VM	Its own isolated desktop and browser	A cloud agent. You can take the desktop back
A self-hosted worker	The signed-in Mac desktop, or a Linux X11 display	`agent worker --computer-use start`. Opt-in

Sources, in row order: October 23 reply (opens in a new tab), Capabilities (opens in a new tab), Computer use and desktop sharing (opens in a new tab).

Who should @-mention it

NERF Mid if you update and leave. Nothing read today says the desktop agent asks before a click, names the apps it will open, or names an off switch. Run Modes, under Settings, then Agents, then Approvals and Execution, cover shell, MCP, and Fetch. The page does not mention Computer Use. Auto-review, the mode it recommends for most people, can allow a call you would have blocked. That warning is about those three tools. Source: Run Modes (opens in a new tab).

If you already use it, take 3.27. Check the app. This article has not.

The VM, and the flagged worker

BUFF OP when the click should stay off your desktop. On February 24, 2026, Cursor said cloud agents test and record demos on an isolated VM, from the web, desktop, mobile, Slack, and GitHub. You can take that remote desktop and hand it back. The week of September 7, 2026: when you take control, the agent stops using the computer. That line is about the cloud agent's desktop. On June 18, 2026, computer use is on by default for every automation, so the agent can demo on its own computer. Sources: February 24 changelog (opens in a new tab), blog (opens in a new tab), Capabilities (opens in a new tab), cloud-agent notes (opens in a new tab), June 18 changelog (opens in a new tab).

BUFF OP on macOS or Linux only with the flag. Computer use and desktop sharing are explicit opt-ins and are never enabled by the server. Workers are macOS and Linux, for My Machines and Team Pools. September 2, 2026: My Machines is one laptop or VM, and team pools are for a team or enterprise. On a Mac, the helper Cursor Computer Use drives the signed-in desktop. The first agent worker --computer-use start installs it. Grant Accessibility and Screen Recording to bundle id co.anysphere.cursor-computer-use, not to Terminal or the Cursor app. Until you do, clicks and screenshots fail. A profile cannot allow Screen Recording. CLI v2026.08.26 is the macOS-worker entry. The page does not list Windows. Granting the helper does not, on any page read today, configure the October 23 desktop update. Sources: docs (opens in a new tab), September 2 changelog (opens in a new tab), CLI changelog (opens in a new tab).

Browser, price, privacy

NERF Browser tools require approval by default: manual approval, which the page recommends, an allow list, or auto-run. The page says never to use auto-run on untrusted code or unfamiliar sites. An enterprise origin allowlist limits automatic navigation. The page does not mention the iOS Simulator. Source: Browser (opens in a new tab).

PRICE Pricing, read October 24, 2026, does not name Computer Use. Agent is on every plan, including Free, where requests are limited. Premium is $30 a month, and the Cloud agents and automations row is checked there and on Super, Ultra, Teams, and Enterprise. Free and Plus show a dash on that row. Prices shown do not include applicable taxes or fees. Source: pricing (opens in a new tab).

The security page, last updated August 25, 2026, says Privacy Mode can be turned on in settings or by an admin, is available to anyone (free or Pro), and, when on, Cursor will not train on your data. It does not mention screenshots or Computer Use. The October 24 pricing page has no plan named Pro. Source: Security (opens in a new tab).

The board stays put

No letter moves. Cursor stays in A on the October 15 AI Coding Agents list. S stays locked.

What to do today

Update, @-mention Computer Use, and stay for the test. Confirm 3.27, the Latest label on the download page.
Use a cloud agent when the click should stay off your desktop, and take the remote desktop when you want the mouse.
On a machine you own, run agent worker --computer-use start on macOS or Linux and grant Cursor Computer Use.
Leave browser auto-run off.

The weekly patch is on beehiiv: subscribe free (opens in a new tab).

The OP or Mid Team

Sources

Checked October 24, 2026.