Coder has unveiled its Agent Relay service, enabling regulated enterprises to operate Cursor's cloud-based coding agents within their own data centers while preserving security governance. The partnership, announced this week with SpaceXAI as the inaugural collaborator, permits engineering teams to execute coding-agent tools on company-controlled systems. Cursor manages inference and planning operations remotely in the cloud, receiving only relevant source code snippets and tool outputs.
The offering targets industries with strict regulatory frameworks—banking, pharmaceuticals, defense, aerospace, and public sector agencies—where self-hosted Coder environments allow teams to enforce compliance requirements within isolated workspaces. Access policies can be configured to prevent connections to unauthorized systems.
The market that AI coding has not been able to reach
Following SpaceX's acquisition of Cursor, which closed on August 14, the company now operates Cursor Cloud Agents capable of running within Coder workspaces on highly regulated customer infrastructure. Engineers retain the Cursor interface they prefer, while Cursor continues managing the agent loop, including inference and planning. Tool execution happens in Coder environments on the customer's network, keeping source code, credentials, and internal systems confined to machines under organizational control.
Rob Whiteley, Coder's chief executive, explained to The New Stack that his organization prioritizes establishing golden paths to address a critical disparity and ensure developers can access their preferred tools without managing underlying infrastructure or compliance mechanics.
At Coder, 1% of my engineers are responsible for 40% of my token spend. The problem isn't how much they're spending; it's the uneven adoption of the technology. There's a widening gap between the (agentic) haves and have-nots.
Rob Whiteley, CEO of Coder
Whiteley noted that the industry's emphasis on maximizing token consumption to boost productivity represents sound thinking but relies on the wrong measurement. Focusing on dollars spent on tokens creates a metric susceptible to misuse. "Now we're correctly focused on upskilling developers – and this is precisely the market Coder opens, i.e., pairing Coder's foundation with SpaceXAI's agentic experience," Whiteley stated.
The blocker is the deployment model
Coder's approach acknowledges that regulated organizations face constraints vendor-hosted solutions cannot satisfy. Source code demands restricted access, execution environments require security and governance controls, and all activities must be logged for audit purposes. Combining Coder's infrastructure with SpaceXAI's agent capabilities unlocks a sector where agent deployment itself has not been the obstacle; rather, the hosting architecture has been the barrier.
Whiteley characterized the severity of this architectural mismatch as frequently absolute in practice.
The worst-case is the common case: blocking Cursor outright. We have dozens of customers where the security team did so. Not because anything is wrong or insecure with Cursor. It's just an architectural mismatch. These enterprises need complete control over the environment in which an agent runs.
Rob Whiteley, CEO of Coder
Whiteley described situations where software engineers discovered that security teams had prohibited cloud agents, effectively blocking Cursor deployment.
This is why you can't have nice things
Developers facing these restrictions voice frustration about losing access to preferred tools. Whiteley recounted a pattern where teams initially adopted Cursor and experienced productivity gains, but as usage expanded and reached security leadership's attention, the tool was withdrawn entirely. "I've seen those same customers reverse their policy with a mandate that now says, 'You can use Cursor, you just need to run the agents in Coder,' so developers at these enterprises finally get the user experience and interface they prefer in Cursor without being told no by security teams. Or worse, told they need to use Citrix," Whiteley explained.
The customer should never be the systems integrator
Whiteley confirmed that customers had requested this capability, and both Cursor and Coder "independently arrived" at recognizing the need to strengthen their integration. "The customer should never be the systems integrator – and to be honest, many customers were already doing this. Cursor has supported self-hosted agents since March," Whiteley noted.
The partnership combines joint market strategy with direct product integration. Each Coder workspace can launch a Cursor worker that establishes an outbound connection to Cursor. Platform teams can provision and scale these workspaces using existing developer environment management processes, allowing regulated organizations to deploy Cloud Agents at scale alongside proprietary code and specialized hardware without sacrificing Cursor's interface or the security and consistency of Coder workspaces.
Tool execution and repository operations remain on customer-controlled systems, while relevant code and tool results travel to Cursor for cloud-based reasoning.
Sandboxed agents are ephemeral & scoped to 1 task
Agent environments operate as sandboxed, temporary instances restricted to individual tasks. Prompt injection attempts that might direct an agent toward restricted resources are prevented at the environment layer rather than depending on model refusal. Model selection and inference processing remain with the cloud provider.
Each execution generates a comprehensive record documenting what the agent accessed, executed, modified, and was prevented from accessing. Compliance documentation for any period can be generated directly from these logs without manual reconstruction.
SpaceXAI represents the first of multiple partnerships Coder plans to establish around a strategy asserting that leading AI coding platforms should operate within any organization, on any infrastructure, without requiring organizations to surrender control. Coder Agent Relay for Cursor is currently available in private preview to design partners.
Source: The New Stack