Run402 MCP Server: Setup for Claude, Cursor and Other Apps

• Sets up and deploys an app in one go

  Plans or runs the whole first deploy for a local folder or a Git repo URL. It creates a wallet, picks a tier, makes a project and links your folder when any of those is missing. Spending steps run only when the call says yes, and it can write a .run402 folder in your workspace.

  Try: “Deploy this folder to Run402 as my-app.”

  Runs code · up

• Applies a release to a project

  Takes a release spec with database migrations, functions, a site, subdomains and web routes, uploads the files, and makes them live. It stops before upload when a warning needs your confirmation. It can also remove things the spec drops.

  Try: “Deploy my site and the SQL migration to project prj_123.”

  Delete · deploy

• Shows your wallet, tier and projects

  Returns the wallet this server acts as, its tier and lease, the allowance, your projects and the active project. It never returns key material.

  Try: “What is my Run402 status?”

  Network · status

• Shows who you are on Run402

  Returns the account identity your wallet resolves to, its sign-in methods, organization memberships and session grade.

  Try: “Who am I on Run402?”

  Network · whoami

• Checks that your setup is healthy

  Runs the SDK health check and lists blocking problems, warnings and each check result.

  Try: “Run the Run402 doctor.”

  Network · doctor

• Looks up the SDK reference

  Serves the SDK reference and the guide for the run tool from files inside the package, by topic or by search.

  Try: “How do I list my projects with the SDK?”

  Read · docs

• Runs a TypeScript snippet against the whole SDK

  Runs your snippet in a sandbox with no files, process or network. Each SDK call it makes is replayed on your computer with your wallet, so one snippet can create databases, run SQL, delete projects, send email or pay.

  Try: “List my projects that have no site yet.”

  Delete · run

• Pages through a long result

  Fetches more of a result that another tool showed only a window of, from a store held in the server process.

  Try: “Show me the next 50 rows of that result.”

  Read · expand_result

Watch out for

• It can spend from your wallet without asking

  Snippets in the run tool use the same SDK as the command line, so they can buy a tier or pay a seller from your wallet. The server shows no confirmation prompt for these calls. A direct payment call defaults to a $0.10 ceiling, but the snippet sets that ceiling itself. github.com

• The up tool can buy a tier when told yes

  The up tool approves spending steps only when yes is set. Its max_spend_usd option makes the plan stop with SPEND_APPROVAL_REQUIRED if it is below $0.10, the amount the code expects for the prototype tier. Leave yes off and read the plan first. github.com

• It can raise your monthly cap and turn on card refills

  The SDK can set a monthly metering cap and a card standing order that refills the allowance under that cap. It needs a live hobby or team lease and a saved card, and a person saves the card through a link. After that, a snippet can change the cap with no further prompt. github.com

• It can delete a project and its data for good

  The project delete call is immediate and irreversible. It drops the database schema, deletes functions, releases subdomains and wipes secrets, with no confirmation step in the server. Snippets can also run any SQL, delete snapshots and delete functions. github.com

• Our advice: do not run it unattended with real money

  Our advice: use the free testnet, keep only a small balance in the wallet, and approve each run call yourself. Do not leave an autonomous agent with a funded mainnet wallet. github.com

• It uploads local files and can send email

  The deploy tool uploads your site files, functions and SQL migrations to the Run402 API. The SDK also has an email send call that snippets can use. github.com

• Shell build commands run when you approve them

  The up tool has an allow_shell_build option that approves shell-string build commands. Leave it off unless you have read the commands. github.com

• A wallet key is created and stored on disk

  The first run creates a wallet file at ~/.config/run402/wallet.json with owner-only permissions, and project keys are cached beside it. The run tool refuses calls that would hand back a key and tells you the command line step to use instead. github.com

• The hosted address is free and cannot pay

  The hosted endpoint offers two lookup tools and says it never handles funds. Paid actions need the local server. github.com

• The snippet checker runs as a child process

  Before a snippet runs, the server starts a TypeScript checker as a child process, and it skips the check if the checker cannot start. github.com

Security advisories