Inter-office memo
- To
- Everyone using Cursor
- From
- Mo, Chief Executive
- Date
- October 24, 2026, 7:15 PM CDT
- Re
- Cursor’s Computer Use
Cursor can now control your desktop apps. How it compares with Codex, Claude and Copilot
On October 23, 2026, Cursor gave its agents Computer Use, so they can click and type in any app on your computer, such as the iOS Simulator, to test what they build. Update Cursor, then let the agent choose it or @-mention Computer Use. Cursor hasn’t said which systems or plans it covers. Codex, Claude Code and GitHub Copilot already offer the same on macOS and Windows.
What Cursor announced
On October 23, 2026, Cursor posted: “Cursor can now control your computer. Agents can drive desktop apps like the iOS Simulator to test the features they build.” Its follow-up is most of what it has said so far:
- “Computer Use lets agents click and type across any app on your computer, not just the browser.”
- “Cursor uses it on its own when a task needs it.”
- “You can also ask for it by @-mentioning Computer Use in your prompt.”
What’s new is where it runs. Cursor’s cloud agents have had computers of their own since February 24: each runs in “its own isolated VM with a full desktop environment,” as Cursor’s docs put it, apart from yours. Now the agent in Cursor’s app can use the apps on your computer, so the agent that wrote a feature can open the app it built and check it.
How to turn it on
- Update Cursor. Cursor’s follow-up links to its download page and names no version.
- Give the agent a task that needs an app, or @-mention Computer Use in the prompt to ask for it.
- On a Mac, grant two permissions. Cursor’s docs for self-hosted workers say computer use runs through a helper app called Cursor Computer Use, which needs Accessibility for the mouse and keyboard and Screen Recording for screenshots. A guide by developer Flavio Copes says the desktop app uses the same helper: grant both to Cursor Computer Use in System Settings > Privacy & Security, not to Cursor or your terminal.
The iOS Simulator comes with Xcode, so install Xcode and its simulators before asking an agent to test an iPhone app.
The same docs cover computer use for self-hosted workers, Cursor’s cloud agents running on machines you manage: start one with agent worker --computer-use start, on macOS or Linux. On Enterprise teams, a Computer Use switch under MCP Configuration in team settings turns it off for those workers. It’s on by default.
What Cursor hasn’t said
- Which systems the desktop feature runs on. The announcement names none, and Cursor’s computer use docs don’t mention Windows.
- Which plans include it, and what it costs. No price was announced, and nothing says how the screenshots an agent takes count toward your usage.
- How it asks before using an app. Codex, Claude Code and Copilot each ask you to approve an app before controlling it. Cursor hasn’t documented approvals for the desktop feature, or how to stop an agent in the middle of an action.
As of October 24, Cursor’s docs have no page for the desktop feature, and the newest entry in its changelog is from October 16.
How Codex, Claude Code and Copilot compare
Cursor joins three agents that already document their own versions:
| Cursor | Codex | Claude Code | GitHub Copilot | |
|---|---|---|---|---|
| Where | Cursor’s app, cloud agents, self-hosted workers | ChatGPT desktop app, in Work and Codex | Claude Desktop, and the CLI | Copilot app and Copilot CLI |
| Systems | Not stated for the app | macOS, Windows | Desktop: macOS 14 or later, Windows. CLI: macOS | macOS, Windows |
| Plans | Not stated | Plus, Pro, Business, Enterprise, Edu, in some regions | Pro and Max, as a research preview | Public preview, plans not listed |
| Turn it on | Update Cursor | Install the Computer Use plugin | Settings > This computer > System, or /mcp in the CLI |
Settings > Computer Use, or /computer on |
The sources are OpenAI’s Computer Use guide and Codex pricing, Anthropic’s docs for the CLI and the desktop app, and GitHub’s changelog and docs. A few differences matter in practice:
- Working while you work. On a Mac, Codex and Claude’s desktop app can use the apps you’ve approved in the background while you keep working. On Windows, OpenAI says Codex “can’t operate in the background,” so it takes over the pointer and keyboard, and it suggests a Windows virtual machine for long tasks.
- What’s off-limits. Codex can’t automate terminal apps or ChatGPT itself, or approve security prompts. Claude gets view-only access to browsers and trading platforms, click-only access to terminals and IDEs, and full control of everything else.
- iOS apps without screen control. On a Mac, Claude Code Desktop opens an iOS Simulator pane that drives the simulator directly, so it “doesn’t need computer use and never takes over your screen.” It’s in public beta on Pro, Max, Team and Enterprise.
- Not everywhere the agent runs. Claude Code’s CLI version is macOS-only, needs an interactive session, and isn’t available through Amazon Bedrock, Google Cloud or Microsoft Foundry. OpenAI documents Codex’s version only in the ChatGPT desktop app.
Keeping it safe
Controlling your desktop is the broadest thing an agent can do. Anthropic’s docs put it plainly: “Unlike the sandboxed Bash tool, computer use runs on your actual desktop with access to the apps you approve.” OpenAI warns that when Codex uses your browser, “it can interact with pages where you’re already signed in.”
- Test a development build with test data, not the copy of the app you use for real work. Anthropic says not to sign in to real accounts on a simulator Claude uses.
- Approve apps one at a time. Claude’s approvals last for the session. Codex and Copilot can remember an app with “Always allow,” which you can remove in their settings.
- Know how to stop it. Esc stops it in Claude Code’s CLI and in Copilot. Cursor hasn’t said.
- Use the precise tool first. Anthropic calls computer use “the broadest and slowest” way to reach an app, so Claude tries an MCP server, the shell or Claude in Chrome before it. OpenAI’s advice for web apps you’re building is the same: “use the built-in browser first.”
When a browser is enough
If you’re building a website, you may not need desktop control at all. Enjoy puts a browser beside each conversation, and the agent you’re running, Claude Code, Codex or another lab’s, can start your site there, read the page, and click and fill in forms to check its own work. On a Mac it can also take screenshots and type. It’s the same page you see, so you can watch it work, and it stays inside that browser.
Enjoy is free and runs each agent on the plan you already have. It doesn’t drive desktop apps or the iOS Simulator; for those, use the agents’ own computer use above.
We’ll update this memo when Cursor documents the desktop feature.
7.Questions.
How do I turn on computer use in Cursor?
- Update the Cursor desktop app, then give an agent a task that needs another app, or @-mention Computer Use in your prompt. The agent also picks it on its own when a task needs it. On a Mac, give the Cursor Computer Use helper app Accessibility and Screen Recording permission in System Settings > Privacy & Security.
Does Cursor’s computer use work on Windows?
- Cursor hasn’t said. Its announcement names no operating system, and its docs cover computer use only for cloud agents and for self-hosted workers on macOS and Linux. Codex, Claude’s desktop app and GitHub Copilot all document Windows support.
Does computer use cost extra in Cursor?
- Cursor announced no price for it. It also hasn’t said which plans include it, or how the screenshots an agent takes count toward your usage.
Can Claude Code control my computer?
- Yes, as a research preview on Claude’s Pro and Max plans, not Team or Enterprise. Turn it on in Claude Desktop under Settings > This computer > System, on macOS 14 or later or Windows, or on a Mac in the CLI by enabling the computer-use server in /mcp. For iOS apps, Claude Desktop’s simulator pane doesn’t need computer use at all.
Can Codex use the apps on my computer?
- Yes, in the ChatGPT desktop app on macOS and Windows, in Work and Codex. Install the Computer Use plugin, then mention @Computer or the app’s name. OpenAI lists it on Plus, Pro, Business, Enterprise and Edu, in some regions only.
Is it safe to let a coding agent control my computer?
- It’s riskier than letting it edit files, because it works on your real desktop, signed in to whatever you are. Test a development build with test accounts, approve one app at a time, and know how to stop it. Esc stops it in Claude Code’s CLI and in Copilot; Cursor hasn’t documented a stop key.