Coder launches Agent Relay for Cursor in private preview

Coder has launched Coder Agent Relay, with SpaceXAI as the launch partner for the self-hosted execution environment.

The product lets Cursor's cloud agents run on a customer's own infrastructure rather than vendor-managed systems. Cursor continues to handle the agent loop, including inference and planning, while tool calls run inside Coder workspaces on the customer's network.

As a result, source code, secrets and access to internal services remain on machines controlled by the customer. Coder is targeting sectors such as banking, defence and government, where security and compliance rules have limited the use of vendor-hosted AI coding tools.

Coder argues that the main barrier to adoption in these industries is deployment, not the underlying AI models. Regulated organisations often require tighter control over code access, execution environments and audit records than hosted products can offer.

Research group Gartner has projected that 80% of enterprise software engineers will need to upskill for generative AI by 2027. But in the most tightly controlled environments, security and compliance reviews still determine whether developers can use such tools.

How it works

Under the setup Coder announced, each workspace can start a Cursor worker that opens an outbound connection to Cursor. Platform teams can provision and scale those workspaces in the same way they already manage developer environments on internal infrastructure, private cloud or on-premises systems.

This allows organisations to place cloud agents near private code repositories and custom hardware while keeping the familiar Cursor interface across app, web and mobile. Air-gapped deployment is also available for customers that do not permit external access.

Coder said the system includes several built-in controls, including sandboxed, temporary agent environments limited to a single task; centrally defined policies on approved models and data sources; and logs showing what an agent accessed, executed, changed or was prevented from doing.

The launch also reflects Coder's broader push to position itself as what it calls an AI Operating Layer inside large organisations. In practice, that means a layer where AI systems run within the organisation's own boundaries and under internal controls on access, model use, auditing and spending.

"Enterprises never rejected AI agents. They rejected the deployment model. The model was never the bottleneck. What has kept this work out of production is everything that comes after the pilot: where the code runs, who has access, what the agent can reach, and what record exists afterward. Those are infrastructure questions, and Coder was built to answer them. Cursor builds a coding experience developers love. We give it the ground to run on inside a bank, an agency, or a defense program," said Rob Whiteley, Chief Executive Officer, Coder.

Regulated market

Coder is aiming at a segment of the software market where demand for AI-assisted development has risen but deployment has lagged. Large financial institutions, public sector bodies and defence organisations have been cautious about sending code and credentials beyond their own infrastructure, particularly when tools require external execution environments.

The new product is intended to address those concerns by shifting execution back inside the customer's environment while preserving access to cloud-based agent workflows. The arrangement is meant to give platform and security teams a single place to apply network rules and governance standards across both human developers and automated agents.

SpaceXAI, identified as the first agent provider working with Agent Relay, said the arrangement is meant to satisfy both developer demand and enterprise security requirements. The integration has been designed so support for additional providers can be extended over time.

"Engineering teams want to build with Cursor. Enterprise security policies require that sensitive information not leave its own infrastructure. Coder provides those teams a path to run Cursor inside environments they fully control, giving developers the experience they want while maintaining the security controls they need," said Adams.

Coder Agent Relay for Cursor is currently in private preview with design partners.