Make your first API request in Cursor

Bring web access into the project you already use. Give the agent a clear request workflow, validate one authorized target, then build extraction, pagination and storage around the result.

  • Keep your existing language, dependencies and project structure
  • Separate shared project settings from personal credentials
  • Validate the response before continuing the task

For authorized web access, development, testing and data workflows.

Web access API and automation workflow illustration

Choose the integration that fits your project

Start with the smallest usable path, then add tools and workflow complexity as needed.

Call the public API

Use your existing HTTP client and control requests, sessions and result handling. Available today.

API documentation

Organize tasks with a Skill

Give the agent access rules, then prepare parameters, check status and handle failures by task.

Cloudbypass Skill

Connect through MCP

Existing HTTP tools need custom headers and secure credential injection. The hosted service is still planned.

Hosted MCP

Set up, request and validate

Prove the workflow with one inspectable request before adding complex configuration.

  1. Define the project task

    Record the authorized target, expected output and stop conditions. Ask the agent to read the Vibe Coding guide before making changes.

  2. Choose where requests run

    Use the project terminal or a connected HTTP tool. Cursor supports project MCP configuration in .cursor/mcp.json; do not add an unpublished hosted endpoint.

  3. Check and keep the result

    Inspect x-cb-status, the target status and the actual content. Keep redacted logs, then expand the workflow only after a successful test.

Give the agent a task you can inspect

Examples use minimal parameters and no real key. Follow the documentation for V2 / V2s proxy and session settings.

Start with a minimal requestHTTP API
curl --include --request GET \
  "https://api.cloudbypass.com/" \
  --header "x-cb-host: example.com" \
  --header "x-cb-apikey: ${CLOUDBYPASS_APIKEY:?}" \
  --max-time 90

# POSIX shell example; set the key securely first.
# Check x-cb-status, target status and content.
# For V2 / V2s, add version and stable proxy parameters.
Set credentials in the runtime first. Examples do not run on this page.
HTTP API requests and session management illustration

Project settings and tool permissions in Cursor

Share connection settings, not secrets. A remote MCP server has its own environment and cannot be assumed to read variables from your computer.

Proxy network and access routing illustration
CheckWhat to inspectNext action
Credentials and scopeCheck credentials, balance and authorized accessFix configuration instead of blindly changing IPs
Version and sessionMatch stable proxies and sessions for V2 / V2sRebuild the verification session after a proxy change
Two status layersCheck x-cb-status and the target HTTP statusA 200 response can still be a login or challenge page
Output and retriesCheck content type, expected fields and attempt budgetStop on configuration errors; limit transient retries

Put your integration to work

Choose a task guide for access strategies, implementation steps and troubleshooting.

Planning and troubleshooting

Development and tool integration

Business use cases

Explore all 14 use cases

Frequently asked questions

Which integration should I use today?

Start with the public HTTP API. OpenClaw can use the published Skill. Existing HTTP MCP tools must support custom headers and secure credentials. The hosted MCP service is still planned.

Can every target be accessed?

No universal guarantee is made. Relevant access capabilities include Cloudflare JavaScript Challenge, Turnstile, DataDome and Imperva / Incapsula, subject to target and runtime validation. This integration does not advertise reCAPTCHA or hCaptcha support or replace account permissions.

Where should API keys and proxy passwords go?

Keep them in secure configuration in the actual runtime or a trusted server. Do not put them in browser code, shared repositories, prompts, screenshots or public logs. Remote services have separate environments.

Do MCP or Skills automatically handle pagination and extraction?

Not by default. The access layer handles requests and responses; workflows or site recipes handle pagination, field extraction, deduplication, login state and business-specific signatures. Diagnose failures instead of retrying indefinitely.

Validate one request before scaling up

Confirm target compatibility, then bring the workflow into your project.