GitHub Copilot vs Cursor: editors, agents, plans and MCP

GitHub Copilot vs Cursor is a choice between an assistant that plugs into the editor you already use (VS Code, Visual Studio, JetBrains, Eclipse, Xcode, Neovim) plus GitHub itself, and a standalone editor with its own agent, cloud agents and Bugbot. Copilot starts at $0 and $10/month; Cursor starts at $0 and $20/month.

Applies to: GitHub Copilot docs as of October 2, 2026 (Copilot CLI 1.0.82) and Cursor 3.22. Last checked: October 2, 2026.

On this page

At a glance

Editors and surfaces

Copilot runs inside other editors. GitHub’s feature matrix covers VS Code, Visual Studio, JetBrains IDEs, Eclipse, Xcode and Neovim:

Copilot is also available on GitHub.com, GitHub Mobile, Windows Terminal Canary, the command line and the Copilot desktop app (what is Copilot). GitHub notes that Copilot is not available for GitHub Enterprise Server (plans).

Cursor is its own editor. The download page lists builds for macOS (ARM64, x64, Universal), Windows (x64 and ARM64) and Linux (.deb, RPM and AppImage, x64 and ARM64). Cloud agents can also be started from cursor.com/agents, Cursor for iOS, Slack (@cursor), GitHub or Bitbucket PR comments, Linear and the API (cloud agents).

CLI install

Copilot CLI (install docs) needs an active Copilot plan; the npm route needs Node.js 22 or later:

npm install -g @github/copilot

brew install --cask copilot-cli

winget install GitHub.Copilot

Start it with copilot and sign in with /login.

Cursor CLI (install docs), macOS, Linux and WSL:

curl https://cursor.com/install -fsS | bash

Windows:

irm 'https://cursor.com/install?win32=true' | iex

Run it with agent.

Models

Copilot. On Copilot Free and Copilot Student, models are available through auto model selection only. Paid plans list models from Anthropic (Claude Haiku 4.5 through Claude Opus 5 and Claude Fable 5.1), Google (Gemini 3.5 to 3.8 Flash), OpenAI (GPT-5 mini through GPT-6 Astra), xAI (Grok 4.5, 4.6), Moonshot (Kimi K2.7 Code, Kimi K3) and Microsoft (MAI-Code-1.1-Flash) (plans). Pro has “a selection of models”, Pro+ and Business have “access to premium models”, Max and Enterprise “priority access to premium models”.

Cursor. Usage is split into two pools (models and pricing):

Other Models are charged at API rates. Cursor’s Auto routes each request with three modes: Cost, Balance and Intelligence.

Plans and prices

GitHub Copilot

Source: Plans for GitHub Copilot. For Business and Enterprise, each licence adds credits to a shared pool, and usage beyond it costs $0.01 per AI credit. Code completions and next edit suggestions are not billed in AI credits and are unlimited on paid plans. All plans include Copilot CLI and the Copilot app. Copilot code review on Free is limited to “Review selection” in VS Code, and Copilot Student excludes third-party agents.

Cursor

Sources: Cursor pricing, plan docs, Teams pricing. Pro, Pro Plus and Ultra include unlimited tab completions, Bugbot access and Cloud Agents; after the included usage you can add on-demand usage at API rates or upgrade. Teams usage is per user, does not transfer between members, and resets each billing cycle.

Cloud agents

Copilot cloud agent is available on all paid Copilot plans. It researches the repository, plans and makes changes on a branch in a GitHub Actions-powered environment, then proposes a pull request. You start it by assigning an issue to Copilot, from the agents panel on GitHub.com, by mentioning @copilot in a PR comment, from VS Code, or from scheduled or event automations (about cloud agent). GitHub documents these built-in limits (risks and mitigations):

• It can push only to its own copilot/ branch.
• Internet access is restricted by a firewall.
• Only users with write access can trigger it.
• Workflows don’t run until a user with write access clicks Approve and run workflows.
• Its draft PRs must be reviewed and merged by a human.

Cursor cloud agents run in isolated VMs with the repository, dependencies, secrets and network access. They require a paid plan, are charged at API pricing for the selected model, and ask you to set a spend limit on first use (cloud agents). Cursor’s cloud agent security page says they auto-run terminal commands, internet access is on by default but can be limited to an allowlist, and Runtime Secrets are stripped from transcripts, tool output and commits.

Warning

Cursor’s docs say an attacker who plants instructions in content a cloud agent reads “could try to make the agent exfiltrate code to an external host”. Restrict network access to allowlisted domains and mark secrets as Runtime Secrets (cloud agent security).

Code review: Copilot code review vs Bugbot

Bugbot runs on each PR update, or on demand when someone comments cursor review or bugbot run on a PR.

Sources: Copilot plans, feature matrix, Cursor plan docs, repository instructions, Bugbot.

Rules and instruction files

Copilot (repository instructions) reads .github/copilot-instructions.md, path-specific .github/instructions/NAME.instructions.md files, and AGENTS.md files anywhere in the repo (nearest wins) or a single CLAUDE.md or GEMINI.md at the root:

---
applyTo: "**/*.py"
excludeAgent: "code-review"
---

Cursor (rules) uses project rules in .cursor/rules as .mdc files, User Rules, Team Rules (Team and Enterprise) and AGENTS.md, which can sit in any subdirectory:

---
description: "Rule description"
alwaysApply: false
globs: src/**/*.ts
---

Rule content here

A repository with a root AGENTS.md is read by both.

MCP

Copilot in VS Code reads MCP servers from .vscode/mcp.json or user settings (MCP in Copilot Chat):

{
  "inputs": [
    {
      "type": "promptString"
    }
  ],
  "servers": {
    "fetch": {
      "command": "uvx",
      "args": ["mcp-server-fetch"]
    }
  }
}

For Business and Enterprise members, the “MCP servers in Copilot” policy must be on, and it is disabled by default. Copilot CLI includes the GitHub MCP server by default (about Copilot CLI).

Cursor reads .cursor/mcp.json (project) or ~/.cursor/mcp.json (global), with stdio, SSE and Streamable HTTP transports and OAuth (MCP):

{
  "mcpServers": {
    "server-name": {
      "command": "npx",
      "args": ["-y", "mcp-server"],
      "env": {
        "API_KEY": "value"
      }
    }
  }
}

Servers such as the GitHub MCP Server and Fetch in the MCP directory list setup for both.

Approvals, privacy and security docs

Command approval. Copilot CLI asks before modifying or running files; --allow-tool and --deny-tool set per-tool rules, and --deny-tool overrides --allow-all-tools (about Copilot CLI). In Cursor, terminal commands need approval by default; Run Modes are Auto-review (recommended), Allowlist and Run Everything, with a sandbox on macOS (Seatbelt) and Linux (Landlock and seccomp, kernel 6.2+) (run modes).

Warning

GitHub says that with --allow-all-tools, “Copilot has the same access as you do to files on your computer” without asking, and to launch the CLI only from directories you trust. Cursor describes Run Everything as “every tool call runs automatically”, for users who “accept the risk and want zero prompts”. Both vendors’ safer options are per-tool allowlists (--allow-tool, Cursor’s Allowlist) and, in Cursor, Auto-review with the sandbox.

Training and retention. GitHub says it does not use Copilot Business or Enterprise customer data to train models; for Free, Pro, Pro+ and Max it may use interaction data unless the user opts out, and it keeps zero data retention agreements with OpenAI and, for generally available features, Anthropic (model hosting). Cursor says that with Privacy Mode on, code is never used for training and it has zero data retention agreements with model providers; Privacy Mode is on by default for Enterprise teams, Teams and Enterprise admins can enforce it, and Cursor holds SOC 2 Type II (privacy).

Which to pick

• If you need to stay in JetBrains, Visual Studio, Eclipse, Xcode or Neovim, the docs show Copilot supports those editors; Cursor is its own editor.
• If you need the lowest paid entry price, the docs show Copilot Pro at $10/month against Cursor Pro at $20/month.
• If you need PR review on GitLab or Bitbucket, the docs show Bugbot supports GitHub, GitLab and Bitbucket.
• If you need an agent that starts from a GitHub issue assignment, the docs show Copilot cloud agent takes issues assigned to Copilot and is limited to its own copilot/ branch.
• If you need cloud agents from Slack or Linear, the docs show Cursor accepts @cursor there.
• If you need to keep prompts out of model training on an individual plan, the docs show Cursor’s Privacy Mode can be switched on by any user; on Copilot individual plans you opt out of training data use in settings.
• If you need GitHub Enterprise Server, the docs say Copilot is not available there; Bugbot lists GitHub Enterprise Server support.

See the plans tracker for current usage wording per plan.