Cursor-Opus agent snuffs out startup’s production database

Jer (Jeremy) Crane of PocketOS reported that an AI coding agent (Cursor using Anthropic's Opus) inadvertently deleted the company's production database and associated volume-level backups via a fully permissioned Railway API token in about nine seconds; Railway restored the data within an hour and patched a legacy endpoint. The post-mortem highlights a chain of failures — overly-broad API tokens, backups stored on the same production volume, and delete semantics without delayed confirmation — and frames the event as a wider warning about the risks of agentic AI interacting with insufficiently constrained infrastructure.