npm TypeScript analyzed 4.17.8

run402-mcp

v4.17.8

MCP server for Run402 — AI-native Postgres + REST + auth + storage + static sites. Pay with x402 USDC on Base. No signups.

maintainer: kychee
license: MIT
first seen: 2026-06-02
last seen: 2026-08-13
releases · 30d: 88
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 193 tools

transport stdio verified reported listed in the official MCP registry counts 193 tools · 0 res · 0 prompts permission surface via code analysis

tools

accept_project_transfer
add_org_member
admin_archive_project
admin_reactivate_project
admin_set_lease_perpetual
ai_moderate
ai_translate
ai_usage
allowance_create
allowance_export
allowance_status
app_up
apply_expose
assets_get
assets_ls
assets_put
assets_rm
assets_sign
auth_settings
billing_history
browse_apps
cancel_function_run
cancel_project_transfer
check_balance
ci_create_binding
ci_get_binding
ci_list_bindings
ci_revoke_binding
claim_project_transfer
claim_subdomain
contract_call
contract_deploy
contract_read
create_auth_user
create_checkout
create_email_organization
create_function_run
create_mailbox
create_notification_rule
create_org
create_project_branch
create_project_grant
create_project_snapshot
delete_function
delete_mailbox
delete_mailbox_webhook
delete_notification_rule
delete_passkey
delete_project
delete_project_branch
delete_project_snapshot
delete_secret
delete_signer
delete_subdomain
delete_version
demote_user
deploy_diagnose_url
deploy_events
deploy_list
deploy_rehearse
deploy_release_active
deploy_release_diff
deploy_release_get
deploy_resume
deploy_site
deploy_site_dir
deploy_verify_edge
diagnose_public_url
domains_activate
domains_apply
domains_check
domains_disconnect
domains_ensure
domains_get
domains_list
domains_repair
domains_test_receive
drain_signer
export_project_archive
fork_app
generate_image
get_agent_contact_status
get_app
get_contract_call_status
get_email
get_email_raw
get_expose
get_function_logs
get_function_run
get_function_run_logs
get_mailbox
get_mailbox_webhook
get_notification_preferences
get_operator_status
get_org
get_project_snapshot
get_quote
get_schema
get_signer
get_usage
import_project_archive
init
initiate_project_transfer
inspect_project_archive
invite_auth_user
invoke_function
jobs_cancel
jobs_download_artifact
jobs_get
jobs_logs
jobs_purge
jobs_submit
link_wallet_to_organization
list_emails
list_function_runs
list_functions
list_incoming_transfers
list_mailbox_webhook_deliveries
list_mailbox_webhooks
list_mailboxes
list_notification_channels
list_notification_rules
list_notifications
list_org_members
list_orgs
list_outgoing_transfers
list_passkeys
list_project_branches
list_project_snapshots
list_projects
list_secrets
list_signers
list_subdomains
list_tenant_payments
list_versions
passkey_login_options
passkey_login_verify
passkey_register_options
passkey_register_verify
pay_url
preview_project_transfer
project_get
project_key_cache_export
project_key_cache_status
project_use
promote_user
provision_postgres_project
provision_signer
publish_app
redrive_function_run
redrive_mailbox_webhook_delivery
register_mailbox_webhook
remove_org_member
rename_org
rename_project
renew_project_branch
request_faucet
request_magic_link
rest_query
restore_project_snapshot
revoke_project_grant
rotate_webhook_secret
run_sql
scaffold_roles
send_email
send_message
service_health
service_status
set_agent_contact
set_auto_recharge
set_low_balance_alert
set_mailbox_defaults
set_notification_preferences
set_org_member_role
set_org_payout_wallet
set_recovery_address
set_secret
set_tier
set_user_password
start_operator_passkey_enrollment
status
test_notification
tier_status
update_function
update_mailbox
update_mailbox_webhook
update_version
validate_manifest
verify_agent_contact_email
verify_magic_link
verify_project_archive
wait_for_cdn_freshness
whoami

code evidence v4.17.8 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 534

filesystem 29

fs package/core/dist/allowance.js :1 import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, renameSync, statSync } from "node:fs";
fs package/core/dist/config.js :3 import { existsSync, renameSync, mkdirSync, chmodSync, readFileSync, writeFileSync } from "node:fs";
fs package/core/dist/control-plane-session.js :1 import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, renameSync, statSync, rmSync, } from "node:fs";
fs package/core/dist/keystore.js :1 import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync, chmodSync, rmdirSync } from "node:fs";
fs package/core/dist/operator-session.js :1 import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, renameSync, statSync, rmSync } from "node:fs";
fs package/core/dist/profile-state.js :1 import { readFileSync, writeFileSync, mkdirSync, renameSync, chmodSync, rmdirSync } from "node:fs";
fs package/core/dist/profiles.js :17 import { readFileSync, writeFileSync, mkdirSync, renameSync, chmodSync, existsSync, readdirSync, rmSync, } from "node:fs";
fs package/core/dist/write-auth-session.js :1 import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, renameSync, statSync, rmSync, } from "node:fs";
fs package/dist/index.js :2 import { readFileSync } from "node:fs";
fs package/dist/tools/assets-get.js :2 import { createWriteStream, mkdirSync } from "node:fs";
fs package/dist/tools/assets-put.js :2 import { readFileSync, statSync, existsSync } from "node:fs";
fs package/dist/tools/deploy-site.js :1 import { mkdtempSync, writeFileSync, mkdirSync, rmSync } from "node:fs";
fs package/dist/tools/init.js :2 import { mkdirSync } from "node:fs";
fs package/dist/tools/jobs.js :2 import { createWriteStream, mkdirSync } from "node:fs";
fs package/dist/tools/project-archives.js :1 import { mkdir, writeFile } from "node:fs/promises";
fs package/sdk/core-dist/allowance.js :1 import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, renameSync, statSync } from "node:fs";
fs package/sdk/core-dist/config.js :3 import { existsSync, renameSync, mkdirSync, chmodSync, readFileSync, writeFileSync } from "node:fs";
fs package/sdk/core-dist/control-plane-session.js :1 import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, renameSync, statSync, rmSync, } from "node:fs";
fs package/sdk/core-dist/keystore.js :1 import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync, chmodSync, rmdirSync } from "node:fs";
fs package/sdk/core-dist/operator-session.js :1 import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, renameSync, statSync, rmSync } from "node:fs";
fs package/sdk/core-dist/profile-state.js :1 import { readFileSync, writeFileSync, mkdirSync, renameSync, chmodSync, rmdirSync } from "node:fs";
fs package/sdk/core-dist/profiles.js :17 import { readFileSync, writeFileSync, mkdirSync, renameSync, chmodSync, existsSync, readdirSync, rmSync, } from "node:fs";
fs package/sdk/core-dist/write-auth-session.js :1 import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, renameSync, statSync, rmSync, } from "node:fs";
fs package/sdk/dist/node/actions-node.js :3 import { lstat, mkdir, mkdtemp, readFile, rename, rm, writeFile, } from "node:fs/promises";
fs package/sdk/dist/node/archives-node.js :2 import { lstat, mkdir, mkdtemp, opendir, readFile, rm, stat, writeFile } from "node:fs/promises";
fs package/sdk/dist/node/deploy-manifest.js :1 import { copyFile, readFile, rm } from "node:fs/promises";
fs package/sdk/dist/node/files.js :9 import { readdir, lstat } from "node:fs/promises";
fs package/sdk/dist/node/index.js :22 import { readFileSync } from "node:fs";
fs package/sdk/dist/node/payment-attempts.js :9 import { chmodSync, closeSync, fchmodSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, readdirSync, rmSync, statSync, writeFileSync, } from "node:fs";

shell / exec 1

shell package/sdk/dist/node/actions-node.js :2 import { execFile } from "node:child_process";

network 14

net package/dist/tools/init.js :79 const res = await fetch(TEMPO_RPC, {
net package/dist/tools/pay-url.js :31 const result = await (deps.getSdk?.() ?? getSdk()).pay.fetch(args.url, init, {
net package/sdk/dist/kernel.js :106 res = await fetch(url, {
net package/sdk/dist/namespaces/archives.js :85 res = await this.client.fetch(`${this.client.apiBase}${path}`, { headers });
net package/sdk/dist/namespaces/assets.js :650 const res = await this.client.fetch(url, {
net package/sdk/dist/namespaces/deploy.js :564 // The kernel's x402-wrapped fetch (Node) handles 402 transparently
net package/sdk/dist/namespaces/email.js :435 const res = await this.client.fetch(url, {
net package/sdk/dist/namespaces/jobs.js :48 const res = await this.client.fetch(url, {
net package/sdk/dist/namespaces/operator.js :180 res = await this.client.fetch(url, {
net package/sdk/dist/namespaces/pay.js :212 async fetch(url, init, options = {}) {
net package/sdk/dist/namespaces/tier.js :19 * allowance state. Payment flows through the injected fetch (x402 in
net package/sdk/dist/node/actions-node.js :2043 const res = await fetch(url, { method: "GET" });
net package/sdk/dist/node/archives-node.js :72 res = await fetch(`${coreUrl}/archives/v1/import`, {
net package/sdk/dist/node/paid-fetch.js :452 return globalThis.fetch(input, init);

tool registrations 193

provision_postgres_project package/dist/index.js :228
run_sql package/dist/index.js :229
rest_query package/dist/index.js :230
apply_expose package/dist/index.js :231
validate_manifest package/dist/index.js :232
app_up package/dist/index.js :233
get_expose package/dist/index.js :234
get_schema package/dist/index.js :235
get_usage package/dist/index.js :236
export_project_archive package/dist/index.js :237
inspect_project_archive package/dist/index.js :238
verify_project_archive package/dist/index.js :239
import_project_archive package/dist/index.js :240
create_project_snapshot package/dist/index.js :241
list_project_snapshots package/dist/index.js :242
get_project_snapshot package/dist/index.js :243
restore_project_snapshot package/dist/index.js :244
delete_project_snapshot package/dist/index.js :245
create_project_branch package/dist/index.js :246
list_project_branches package/dist/index.js :247
renew_project_branch package/dist/index.js :248
delete_project_branch package/dist/index.js :249
deploy_rehearse package/dist/index.js :250
assets_put package/dist/index.js :252
assets_get package/dist/index.js :253
assets_ls package/dist/index.js :254
assets_rm package/dist/index.js :255
assets_sign package/dist/index.js :256
diagnose_public_url package/dist/index.js :257
wait_for_cdn_freshness package/dist/index.js :258
invoke_function package/dist/index.js :261
get_function_logs package/dist/index.js :268
list_functions package/dist/index.js :269
delete_function package/dist/index.js :270
update_function package/dist/index.js :271
create_function_run package/dist/index.js :273
list_function_runs package/dist/index.js :274
get_function_run package/dist/index.js :275
get_function_run_logs package/dist/index.js :276
cancel_function_run package/dist/index.js :277
redrive_function_run package/dist/index.js :278
set_secret package/dist/index.js :280
list_secrets package/dist/index.js :281
delete_secret package/dist/index.js :282
jobs_submit package/dist/index.js :284
jobs_get package/dist/index.js :285
jobs_logs package/dist/index.js :286
jobs_cancel package/dist/index.js :287
jobs_purge package/dist/index.js :288
jobs_download_artifact package/dist/index.js :289
deploy_site package/dist/index.js :291
deploy_site_dir package/dist/index.js :292
deploy_diagnose_url package/dist/index.js :294
deploy_resume package/dist/index.js :295
deploy_list package/dist/index.js :296
deploy_events package/dist/index.js :297
deploy_verify_edge package/dist/index.js :298
deploy_release_get package/dist/index.js :299
deploy_release_active package/dist/index.js :300
deploy_release_diff package/dist/index.js :301
ci_create_binding package/dist/index.js :303
ci_list_bindings package/dist/index.js :304
ci_get_binding package/dist/index.js :305
ci_revoke_binding package/dist/index.js :306
claim_subdomain package/dist/index.js :307
delete_subdomain package/dist/index.js :308
list_subdomains package/dist/index.js :309
browse_apps package/dist/index.js :311
fork_app package/dist/index.js :312
publish_app package/dist/index.js :313
list_versions package/dist/index.js :314
get_quote package/dist/index.js :316
pay_url package/dist/index.js :317
tier_status package/dist/index.js :323
set_tier package/dist/index.js :324
delete_project package/dist/index.js :325
rename_project package/dist/index.js :326
admin_set_lease_perpetual package/dist/index.js :328
admin_archive_project package/dist/index.js :329
admin_reactivate_project package/dist/index.js :330
initiate_project_transfer package/dist/index.js :332
preview_project_transfer package/dist/index.js :333
accept_project_transfer package/dist/index.js :334
claim_project_transfer package/dist/index.js :335
cancel_project_transfer package/dist/index.js :336
list_incoming_transfers package/dist/index.js :337
list_outgoing_transfers package/dist/index.js :338
promote_user package/dist/index.js :339
demote_user package/dist/index.js :340
check_balance package/dist/index.js :342
list_projects package/dist/index.js :343
list_tenant_payments package/dist/index.js :344
allowance_status package/dist/index.js :346
allowance_create package/dist/index.js :347
allowance_export package/dist/index.js :348
request_faucet package/dist/index.js :349
generate_image package/dist/index.js :351
create_mailbox package/dist/index.js :353
list_mailboxes package/dist/index.js :354
set_mailbox_defaults package/dist/index.js :355
send_email package/dist/index.js :356
list_emails package/dist/index.js :357
get_email package/dist/index.js :358
get_email_raw package/dist/index.js :359
get_mailbox package/dist/index.js :360
update_mailbox package/dist/index.js :361
delete_mailbox package/dist/index.js :362
register_mailbox_webhook package/dist/index.js :363
list_mailbox_webhooks package/dist/index.js :364
get_mailbox_webhook package/dist/index.js :365
delete_mailbox_webhook package/dist/index.js :366
update_mailbox_webhook package/dist/index.js :367
list_mailbox_webhook_deliveries package/dist/index.js :368
redrive_mailbox_webhook_delivery package/dist/index.js :369
ai_translate package/dist/index.js :371
ai_moderate package/dist/index.js :372
ai_usage package/dist/index.js :373
send_message package/dist/index.js :375
set_agent_contact package/dist/index.js :376
get_agent_contact_status package/dist/index.js :377
verify_agent_contact_email package/dist/index.js :378
start_operator_passkey_enrollment package/dist/index.js :379
get_operator_status package/dist/index.js :381
get_notification_preferences package/dist/index.js :382
set_notification_preferences package/dist/index.js :383
list_notifications package/dist/index.js :384
test_notification package/dist/index.js :387
rotate_webhook_secret package/dist/index.js :388
list_notification_channels package/dist/index.js :400
list_notification_rules package/dist/index.js :401
create_notification_rule package/dist/index.js :402
delete_notification_rule package/dist/index.js :403
create_checkout package/dist/index.js :405
billing_history package/dist/index.js :406
update_version package/dist/index.js :408
delete_version package/dist/index.js :409
get_app package/dist/index.js :410
init package/dist/index.js :412
status package/dist/index.js :414
project_get package/dist/index.js :416
project_use package/dist/index.js :417
project_key_cache_status package/dist/index.js :418
project_key_cache_export package/dist/index.js :419
request_magic_link package/dist/index.js :421
verify_magic_link package/dist/index.js :422
create_auth_user package/dist/index.js :423
invite_auth_user package/dist/index.js :424
set_user_password package/dist/index.js :425
auth_settings package/dist/index.js :426
scaffold_roles package/dist/index.js :427
passkey_register_options package/dist/index.js :428
passkey_register_verify package/dist/index.js :429
passkey_login_options package/dist/index.js :430
passkey_login_verify package/dist/index.js :431
list_passkeys package/dist/index.js :432
delete_passkey package/dist/index.js :433
domains_ensure package/dist/index.js :435
domains_get package/dist/index.js :436
domains_list package/dist/index.js :437
domains_check package/dist/index.js :438
domains_apply package/dist/index.js :439
domains_repair package/dist/index.js :440
domains_test_receive package/dist/index.js :441
domains_activate package/dist/index.js :442
domains_disconnect package/dist/index.js :443
create_email_organization package/dist/index.js :445
link_wallet_to_organization package/dist/index.js :446
set_auto_recharge package/dist/index.js :447
provision_signer package/dist/index.js :449
get_signer package/dist/index.js :450
list_signers package/dist/index.js :451
set_recovery_address package/dist/index.js :452
set_low_balance_alert package/dist/index.js :453
contract_call package/dist/index.js :454
contract_deploy package/dist/index.js :455
contract_read package/dist/index.js :456
get_contract_call_status package/dist/index.js :457
drain_signer package/dist/index.js :458
delete_signer package/dist/index.js :459
service_status package/dist/index.js :461
service_health package/dist/index.js :462
create_org package/dist/index.js :464
get_org package/dist/index.js :465
rename_org package/dist/index.js :466
set_org_payout_wallet package/dist/index.js :467
whoami package/dist/index.js :468
list_orgs package/dist/index.js :469
list_org_members package/dist/index.js :470
add_org_member package/dist/index.js :471
set_org_member_role package/dist/index.js :472
remove_org_member package/dist/index.js :473
create_project_grant package/dist/index.js :474
revoke_project_grant package/dist/index.js :475

declared dependencies 18

@modelcontextprotocol/sdk@^1.27.1
@humanwhocodes/momoa@3.3.10
@noble/curves@^2.0.1
@noble/hashes@^2.0.1
@scure/base@1.2.6
@x402/evm@^2.19.0
@x402/extensions@^2.19.0
@x402/fetch@^2.19.0
ipaddr.js@1.9.1
json-canonicalize@2.0.0
mppx@^0.4.7
viem@^2.47.4
zod@^3.24.0
@run402/functions@^3.7.0
@types/node@^22.0.0
tsx@^4.19.0
typescript@^5.7.0
yaml@^2.8.2

obfuscation 1

dynamic require()/import() package/sdk/dist/node/deploy-manifest.js :687 return await import(`${url}?run402_config=${Date.now()}`);