Finally, a zero config boilerplate for AI-native software engineers

Designed by engineers living on the bleeding edge of AI-driven software development, CursorCraft is an AI-native Next.js SaaS starter, complete with database, auth, payments, and emails. Perfect for engineers with a prompt-first working style who like to move fast.

Build with the best tools
Auth.js
Supabase
Resend
Cursor
Last update: 7 hours ago·Changelog
9+ rules and 6 commands included

Your Cursor just got as efficient and reliable as a Senior Software Engineer you can truly collaborate with

CursorCraft's integrated rulefiles make sure you never have to micromanage or interrupt your AI again. It's like your prompts just got an invisible power-up. No setup required.

Rules are loaded automatically on every Cursor prompt. No extra steps.

Without Cursor rules
  • Stripe webhooks silently fail, losing payments
  • Protected routes accessible to anyone
  • No rate limiting = bot attacks
  • AI generates spaghetti code every time
  • Security holes you won't find until hacked
With CursorCraft rules
  • Webhooks verified and logged automatically
  • Auth middleware applied consistently
  • Rate limits on all sensitive endpoints
  • AI follows your exact architecture
  • Security best practices built-in
  • .cursor
    • rules
      • stripe-webhooks.mdc
      • protected-routes.mdc
      • auth-sessions.mdc
      • database-migrations.mdc
      • rate-limiting.mdc
      • api-error-handling.mdc
      • email-templates.mdc
      • seo-metadata.mdc
      • and more...
    • commands
      • add-stripe-checkout.mdc
      • add-protected-page.mdc
      • security-audit.mdc
      • add-database-model.mdc
      • add-api-endpoint.mdc
      • add-email-template.mdc
      • and more...

Your AI just received a level-up

Premium-grade skills turn your AI into a true product builder companion.

Move faster and be more effective throughout the entire product building process by using six custom-tailored commands directly in Cursor. Find vulnerabilities, fix nasty bugs and generate entire features. Works every single time -- no prompting required.

Scaffold
Generate entire features
/scaffold a billing system with an Invoice model that links to users
.cursor/commands/scaffold.mdIncluded
Cursor responds:

I'll help you set up the billing feature. I've generated the Prisma schema and a starter UI component based on your rules.

prisma/schema.prisma
model User {
id String @id
+ posts Post[]
+ plan BillingPlan?
}
Brainstorm
Generate ideas
/brainstorm viral marketing ideas for a dev-tool SaaS
.cursor/commands/brainstorm.mdIncluded
Cursor responds:

Here are 5 viral marketing angles for a dev tool: 1. **"Roast My Code" Campaign**: A CLI tool that playfully critiques user code. 2. **Open Source a useful internal tool**: Release a small, polished utility you actually use.

Brainstorming Session
'Roast My Code' CLI campaign
Open Source internal utility
'VS Code vs Cursor' speedrun videos
...and more
Refactor
Modernize code
/refactor dashboard/page.tsx to use Server Actions instead of useEffect
.cursor/commands/refactor.mdIncluded
Cursor responds:

I've converted the client-side fetch to `actions/get-invoices.ts` and updated the component to be async. This removes the need for the loading state.

app/dashboard/page.tsx
- const [data, setData] = useState(null)
- useEffect(() => { fetch... })
+ const data = await getInvoices()
+ return <Dashboard data={data} />
Audit
Find vulnerabilities
/audit app/api/checkout/route.ts for potential security vulnerabilities
.cursor/commands/audit.mdIncluded
Cursor responds:

The webhook signature verification is missing. This allows anyone to fake a payment event. I've added `stripe.webhooks.constructEvent` to fix it.

app/api/checkout/route.ts
const body = await req.text()
+ const event = stripe.webhooks.constructEvent(
+ body,
+ signature,
+ process.env.STRIPE_WEBHOOK_SECRET
+ )
Fix
Solve bugs instantly
/fix the hydration mismatch error in the UserNav component
.cursor/commands/fix.mdIncluded
Cursor responds:

It looks like you're rendering `Date.now()` on the server. I've wrapped the timestamp in a `useEffect` so it only renders on the client.

components/UserNav.tsx
- <span>{Date.now()}</span>
+ const [mounted, setMounted] = useState(false)
+ if (!mounted) return null
+ <span>{Date.now()}</span>
...and more commands

Everything Included

Production-ready from clone

Every piece you need to ship a SaaS. No glue work, no integration headaches.

Magic link

Authentication

Better Auth
  • Google & GitHub OAuth
  • Magic link emails
  • Session management
Hobby
$9
Pro
$29
Team
$99

Payments

  • Checkout flows
  • Webhook handlers
  • Subscription sync
Generate a tagline
Ship faster with AI...

AI Chat

  • OpenAI & Anthropic ready
  • Streaming + persistence
  • Beautiful chat UI

Emails

Resend
  • React Email templates
  • Magic link emails
  • Welcome sequences
users
id
email
plan
1
u@x.co
pro

Database

Supabase
  • Type-safe queries
  • Migration setup
  • User & subscription tables

Dashboard

  • Sidebar layout
  • Protected routes
  • User settings
.cursor/rules/
auth.mdc
billing.mdc
db.mdc

Cursor Rules

Cursor
  • 9 rule files
  • 7 commands
  • Consistent output
sitemap.xml

SEO

  • OpenGraph images
  • Sitemap generation
  • JSON-LD schema

Landing Page

shadcn/ui
  • Dev toolbar with theme switcher
  • 5 sections ready to customize
  • Color, font & spacing presets
Setup Progress
Database
Auth secret
OAuth
6/9

Setup Checker

  • Validates env on startup
  • Blocks on missing required config
  • Quick setup dashboard

Choose your package

Launch sale ends in:
17d:07h:34m:02s

Starter

The complete boilerplate

$99$199

one-time payment

  • Full Next.js boilerplate
  • OAuth & magic link auth
  • Stripe/Polar payments
  • Email templates (Resend)
  • Database & migrations
  • 9+ Cursor rules & 7+ commands
  • Customizable landing page

For builders who want the code and will self-serve

Most Popular

All-In

Boilerplate + updates + support

$149$249

one-time payment

  • Full Next.js boilerplate
  • OAuth & magic link auth
  • Stripe/Polar payments
  • Email templates (Resend)
  • Database & migrations
  • 9+ Cursor rules & 7+ commands
  • Customizable landing page
  • Lifetime updates
  • Discord community
  • Priority support + setup call
  • Setup guarantee (full refund if stuck)

For builders who want ongoing updates and help when stuck

Frequently Asked Questions

What's the difference between Starter and All-In?

Starter gets you the complete boilerplate — everything to ship a SaaS. All-In adds lifetime updates, Discord community, and priority support with a setup call.

What if I'm new to Cursor?

The boilerplate includes guides and the rules work automatically. You'll learn by building.

Can I use this for multiple projects?

Yes. The license allows unlimited personal and commercial projects, including client work.

What is the tech stack?

Next.js 15, TypeScript, Tailwind CSS, shadcn/ui, Auth.js, Stripe/Polar, Resend, and Supabase/Drizzle.

What does 'lifetime updates' mean?

All-In buyers get every future update forever. New integrations, improved patterns, major versions — all included.

Is there a refund policy?

Since the code is yours immediately, we can't offer refunds. But builders consistently ship and earn back their investment within weeks.

Won't all these rules increase my token usage?

The rules are intentionally short and focused. The extra tokens are minimal, and the quality improvement in AI output more than makes up for it. You'll spend less time fixing bad code than you would on a few extra tokens.

Meet the Creator

Walde

Waldemar Panin

Product Engineer & Founder

Hey, I'm Walde. I've shipped products for years. When Cursor came out, I went deep — figured out what makes AI actually useful vs. what makes it spit out garbage.

Started with the free Cursor Kit to share what I learned. This boilerplate is the full production setup I use for my own projects.

Follow on X