Set Origin SSH Certificate Requirement via the API

Set whether an owner requires SSH certificates with POST https://api.cursor.com/v1/origin/owners/{ownerSlug}/ssh-certificate-authorities:setRequirement. Official reference: Origin API (OpenAPI OriginService_SetSshCertificateRequirement) and changelog (added 2026-09-22).

Origin is in Early Beta and subject to change. Authenticate with a Cursor user access token that carries namespace:settings:write (installation tokens are not accepted for this write). Availability: Early Beta per the API overview.

While required, git over SSH on the owner's repositories accepts only certificates from the owner's authorities. SSH keys registered by users are refused, and so are user API keys over HTTPS. Requiring certificates with no listed authority returns FailedPrecondition (HTTP 400). Setting the current value succeeds without change. Cost: 5 points against the principal budget (ordinary write).

Path parameters

Param	Required	Meaning
ownerSlug	yes	Owner slug

Request body

Field	Required	Meaning
requireCertificates	yes	true to require SSH certificates; false to stop requiring them

curl --request POST \
  --url 'https://api.cursor.com/v1/origin/owners/OWNER_SLUG/ssh-certificate-authorities:setRequirement' \
  --header 'Authorization: Bearer YOUR_USER_TOKEN' \
  --header 'Content-Type: application/json' \
  --data '{
  "requireCertificates": true
}'

Response

200 returns the owner's requireCertificates setting.

{
  "requireCertificates": true
}

Add at least one authority with Add SSH Certificate Authority before setting requireCertificates to true. List SSH Certificate Authorities returns the same flag alongside the authority list. Base URL: https://api.cursor.com/v1/origin.