squirrelscan for Cursor

Cursor gets squirrelscan as a one-click MCP install plus the audit skills. Cursor can then run audits, read findings as tools, and fix them across your codebase.

1. Install the CLI

The skills and local audits run through the squirrel binary.

curl -fsSL https://install.squirrelscan.com | bash

iwr -useb https://install.squirrelscan.com/install.ps1 | iex

Local audits run entirely on your machine. Signed out, they need no account and cost nothing; signed-in audits spend credits. Verify with squirrel --version.

2. Add the MCP server

{
  "mcpServers": {
    "squirrelscan": {
      "url": "https://mcp.squirrelscan.com/mcp"
    }
  }
}

3. Authenticate (for cloud)

Local audits need nothing. For hosted crawling, publishing, and credits, open Settings → Customize (labelled Tools & Integrations in some builds), find squirrelscan, and click Needs login to run the browser flow. From the Cursor CLI: agent mcp login squirrelscan.

4. Install the skills

The MCP server exposes tools; the skills add autonomous audit-and-fix workflows. Cursor supports the Agent Skills standard natively, and also loads skills from Claude Code’s directories.

squirrel skills install

Prefer one package with the skills and the MCP server? squirrelscan/skills is also a Cursor plugin: teams can import that repository as a team marketplace (Dashboard, Plugins & MCPs, Add Marketplace, Import from Repo), or clone it into ~/.cursor/plugins/local/squirrelscan and reload the window. The plugin used to live in the squirrelscan/squirrelscan repo; a copy imported from there doesn’t follow the move, so import squirrelscan/skills instead.

5. Run an audit

In chat or the agent, trigger the skill:

/audit-website

Cursor detects your project’s website and runs the audit. Or be explicit, or use natural language:

/audit-website https://example.com then fix all issues across the codebase

Use the audit-website skill to audit example.com and fix the accessibility issues.

Next steps