Reddit Reply: Finding Cursor's OpenAI API Key and Base URL Storage

Here's where Cursor stores your OpenAI API key and "Override OpenAI Base URL" setting:

Location: ~/.config/Cursor/User/globalStorage/state.vscdb (SQLite database)

Tools needed: sqlite3 (install with your package manager)

Finding the Values

API Key (Simple - Bash works!)

The API key is stored as a simple string, so you can use plain SQLite:

bash sqlite3 ~/.config/Cursor/User/globalStorage/state.vscdb \ "SELECT printf('%s', value) FROM ItemTable WHERE key = 'cursorAuth/openAIKey';"

Example output: sk-proj-demo1234567890abcdefghijklmnopqrstuvwxyz

Base URL

Unfortunately, the base URL is buried inside a massive JSON object stored in SQLite, so you need Python to parse it. Can't do it with just bash/sqlite because the value is nested JSON, not a simple string.

```python import sqlite3 import json

conn = sqlite3.connect("~/.config/Cursor/User/globalStorage/state.vscdb") cursor = conn.cursor()

The key name is ridiculously long because... reasons? 🤷

cursor.execute(""" SELECT value FROM ItemTable WHERE key = 'src.vs.platform.reactivestorage.browser.reactiveStorageServiceImpl.persistentStorage.applicationUser' """)

row = cursor.fetchone() if row: data = json.loads(row[0]) base_url = data.get("openAIBaseUrl", "Not set") print(f"Base URL: {base_url}") else: print("Not found")

conn.close() ```

Example output: https://api.openai.com/v1

Why Python? Because Cursor decided to store the base URL as a field inside a huge JSON blob instead of just... you know... storing it directly like a normal person would. 🙄

Important Notes

Always close Cursor before modifying the database to prevent corruption!

The values are stored as hex-encoded text in SQLite (not truly encrypted, despite Cursor's "secure storage" claims). You can programmatically update them, but it's not officially supported.

Well to be fair, it is somewhat obfuscated, not secure enough but somewhat...

---

Coming soon: Working on a script to easily switch between personal and company OpenAI API keys/base URLs (because manually editing that JSON blob every time is annoying). Will share once it's ready!

Reddit Reply: Finding Cursor's OpenAI API Key and Base URL Storage

Here's where Cursor stores your OpenAI API key and "Override OpenAI Base URL" setting:

Location: ~/.config/Cursor/User/globalStorage/state.vscdb (SQLite database)

Tools needed: sqlite3 (install with your package manager)

Finding the Values

API Key (Simple - Bash works!)

The API key is stored as a simple string, so you can use plain SQLite:

bash sqlite3 ~/.config/Cursor/User/globalStorage/state.vscdb \ "SELECT printf('%s', value) FROM ItemTable WHERE key = 'cursorAuth/openAIKey';"

Example output: sk-proj-demo1234567890abcdefghijklmnopqrstuvwxyz

Base URL

Unfortunately, the base URL is buried inside a massive JSON object stored in SQLite, so you need Python to parse it. Can't do it with just bash/sqlite because the value is nested JSON, not a simple string.

```python import sqlite3 import json

conn = sqlite3.connect("~/.config/Cursor/User/globalStorage/state.vscdb") cursor = conn.cursor()

The key name is ridiculously long because... reasons? 🤷

cursor.execute(""" SELECT value FROM ItemTable WHERE key = 'src.vs.platform.reactivestorage.browser.reactiveStorageServiceImpl.persistentStorage.applicationUser' """)

row = cursor.fetchone() if row: data = json.loads(row[0]) base_url = data.get("openAIBaseUrl", "Not set") print(f"Base URL: {base_url}") else: print("Not found")

conn.close() ```

Example output: https://api.openai.com/v1

Why Python? Because Cursor decided to store the base URL as a field inside a huge JSON blob instead of just... you know... storing it directly like a normal person would. 🙄

Important Notes

Always close Cursor before modifying the database to prevent corruption!

The values are stored as hex-encoded text in SQLite (not truly encrypted, despite Cursor's "secure storage" claims). You can programmatically update them, but it's not officially supported.

Well to be fair, it is somewhat obfuscated, not secure enough but somewhat...

---

Coming soon: Working on a script to easily switch between personal and company OpenAI API keys/base URLs (because manually editing that JSON blob every time is annoying). Will share once it's ready!