Run402

Get tier pricing for Run402 projects. Free, no auth required. Shows prices, lease durations, storage limits, and API call limits.

Introspect the database schema — tables, columns, types, constraints, and RLS policies. Useful for understanding the database structure before writing queries.

Get a KMS signer's metadata + live native-token balance + USD-micros (Chainlink-cached price).

Get project usage report — API calls, storage usage, limits, and lease expiry.

Import a verified portable archive into a new local Run402 Core project through the Core gateway. Automatically verifies before import, supports dry_run and require_runnable, and reports SECRET_VALUES_REQUIRED with next actions.

Set up agent allowance, request faucet funding, and check tier status — single-call bootstrap. Idempotent, safe to re-run.

Initiate a project transfer (owned-org recipient shape v1.96+). Addressed to a WALLET (`to_wallet`, completed by `accept_project_transfer`), an EMAIL (`to_email`, completed by `claim_project_transfer`), OR an owned ORG (`to_org_id`, same-actor move that completes immediately in the first gateway release) — provide exactly one. You must currently own/admin the project; for `to_org_id` you must be an active owner of both the source and destination orgs. Wallet/email transfers create a `pending` row with 72h expiry and freeze owner-side mutations until completed, cancelled, or expired. The recipient gets the project under the `migrate` billing policy. Owner's tier lease is NOT refunded. GitHub repo ownership is NOT transferred. Calls POST /projects/v1/:project_id/transfers.

Inspect a local run402-project-archive.v1 directory or .r402ar tar offline. Reports digest, required secrets, auth stubs, export report, portability report, and compatibility diagnostics without Cloud credentials.

Create/update a project auth user and send a trusted invite magic link. Requires service_key and an allowed redirect_url.

Invoke a deployed function via HTTP. Free functions behave like the direct test path; paid functions require idempotency_key and may spend allowance, returning a result or pollable run_id. Stable errors preserve code and set isError=true.

Cancel a queued or running managed job.

Download a completed managed job's artifact by filename to a local file. Discover the recorded filenames from the artifacts map returned by jobs_get; the legacy run402:// refs were retired in favor of these gateway URLs.

Get a managed job run by id.

Read recent runner logs for a managed job. Use tail to cap entries and since for an ISO-8601 lower bound; legacy epoch milliseconds are still accepted.

Purge all managed job runs for a project, terminating known active runners first.

Submit a platform-managed job. The request must match the gateway jobs API shape: job_type, input with input.json, and max_cost_usd_micros. The SDK supplies the required idempotency header.

Link a wallet to an existing email organization, enabling hybrid Stripe + x402 access. Fails if the wallet is already linked elsewhere.

List sent emails from the project's mailbox. Shows message ID, template, recipient, status, and timestamp.

List durable runs for a function, filterable by status, event_type, time window, limit, and cursor.

List all deployed functions for a project. Shows names, URLs, Node runtime, timeout, memory, resolved direct deps, and injected `@run402/functions` compatibility metadata: deployed `runtime_version`, gateway `runtime_current_version`, guaranteed `runtime_minimum_version`, and `runtime_stale`. Rebuild stale functions with `functions_rebuild`; an unchanged-source redeploy does not refresh the injected runtime.

List pending project transfers OFFERED TO the authenticated wallet (v1.59+). Each entry carries `preview_path` for deep-linking into the preview tool. Calls GET /agent/v1/transfers/incoming.

List durable webhook delivery rows for the project's mailbox. Webhook delivery is at-least-once with bounded retries + backoff; failures land in 'failed_permanent' (the dead-letter queue). Filter by status to inspect what was lost. Consumers must dedupe on the envelope idempotency_key.

List all webhooks registered on the project's mailbox.

List a project's mailboxes, including address/managed_address, default-role metadata (`is_default_outbound`, `is_auth_sender`), readiness (`can_send`, `can_receive`, `send_blocked_reason`, `domain_kind`), footer-policy fields, mailbox_settings, and next_actions. Use before choosing or repairing email defaults.

List every notification channel for the operator: email, webhook, and every live (non-revoked) Telegram binding with its id, status (pending/active/revoked), chat metadata, and label. Use this to find a telegram_binding_id for create_notification_rule.

List the operator's Telegram routing rules. Each rule ANDs its match dimensions (project_id, source, event_types, classes); an omitted dimension is a wildcard. One rule always targets exactly one Telegram binding.

List the operator's notification audit log (delivered, failed, and skipped attempts). Paginated; filter by event type or since timestamp.

List the members of an org and their roles. Params: `org_id`.

List the orgs you are a member of, with each org's id, display name, your role, and membership status.

List pending project transfers INITIATED BY the authenticated wallet (v1.59+). Each entry carries `preview_path` for deep-linking into the preview tool. Calls GET /agent/v1/transfers/outgoing.

List the authenticated user's active passkeys.

List active contained branch projects for a parent project.

Catch up on what happened to a project since you last looked: the durable, cursored feed of deploy activations, mailbox suspensions, transfers, lifecycle cliffs, and verification outcomes, each with platform-suggested next_actions. The feed also carries app-emitted business facts (a deployed function's own events.emit calls) alongside the platform's own events — pass source:"app" to read just the app's facts, source:"platform" for just the platform's operational record, or event_type (comma-separated) to filter to one-or-more specific types; key on (source, event_type) together since app-chosen type names are free-form. Reach for this after any deploy (the apply/promote response hands you a positioned cursor) and at the start of a session on an existing project. Store the returned cursor and pass it back next time; an expired cursor returns reset:true + earliest_cursor instead of an error. Read-only; works even on frozen projects.

List project data snapshots with optional kind filter and keyset pagination.

List projects from the named, domain-aware inventory (GET /projects/v1). Membership-scoped by default: every project owned by an org the agent's wallet is an active member of, with name, site_url, custom_domains, org (org_id), and status. SIWX wallet auth is signed automatically. Pass org_id to filter to one org (authorize-before-reveal: non-member/guessed → 403, non-UUID → 400), all:true to read the cross-wallet inventory across every wallet controlling your operator email, or limit/cursor to paginate.

List secret keys for a project. Values and value-derived hashes are never shown; use this only to check which keys are configured.

List all KMS signers owned by the project, including deleted ones.

List all subdomains claimed by a project.

List redacted tenant x402 payment records for priced function web routes on a project (GET /projects/v1/:project_id/tenant-payments). Requires project.tenant_payments.read: org developer+ or read-scoped project grant/delegate. Raw X-PAYMENT headers, authorization hashes, and internal metadata are never returned.

List published versions of a project.

Create WebAuthn passkey login options for a project app origin.

Verify a browser WebAuthn assertion and return a normal Run402 auth session.

Create WebAuthn passkey registration options for the authenticated user.

Verify a browser WebAuthn registration response and store the user's passkey.

Call an arbitrary HTTP(S) URL and automatically satisfy a supported x402 exact-payment challenge. Defaults to a $0.10 ceiling, uses the configured allowance wallet, forwards Idempotency-Key, and returns the HTTP response plus a structured payment receipt.

Fetch the preview document for a project transfer of any pending kind (v1.93+). Returns the safe review payload: project name, custom domains, subdomains, function names, secret NAMES (values are never returned), CI bindings that will be revoked at completion, mailbox summary, billing implications, and — on email transfers — the retain_collaborator offer. Caller must be a party to the transfer. Calls GET /agent/v1/transfers/:transfer_id.

Authoritative server read of a project — name, owning org, tier, effective status, active deploy, mailbox addresses, and usage vs. tier limits. Live API call; returns no keys (use project_key_cache_status/export for local cached keys).

Export local cached anon/service keys for one project. Requires reveal:true and emits secret material; use only when a credential-required operation needs keys.

Read redacted local project-key cache status for one project. Local cache only; not authoritative project inventory and never returns full keys.

Server-validate a project and store its id as the active project pointer for this local profile.