Install
$ agentstack add mcp-nico150891-stackrun ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Stackrun
[](https://github.com/nico150891/stackrun/actions/workflows/ci.yml) [](https://www.npmjs.com/package/@nico0891/stackrun) [](https://nodejs.org) [](https://opensource.org/licenses/MIT)
Universal CLI to install, authenticate, and execute SaaS tools from terminal.
Built for developers and AI agents that need to interact with external APIs without wrappers or SDKs.
How it works
Each SaaS tool is described by a declarative JSON manifest (URL, auth, endpoints). Stackrun handles the full flow: search tools in a registry, install them, store tokens, and execute HTTP calls.
stackrun search stripe # find tools in the registry
stackrun install stripe # download the manifest
stackrun login stripe --token sk_test_xxx # store your API key
stackrun call stripe list_customers --limit 10 # execute the API call
stackrun schema stripe # see available commands
stackrun uninstall stripe # remove the tool
stackrun logout stripe # remove stored token
Install
npm install -g @nico0891/stackrun
Then run:
stackrun --help
Quick Start
# Find and install a tool
stackrun search stripe
stackrun install stripe
# Authenticate
stackrun login stripe --token sk_test_xxx
# See what commands are available
stackrun schema stripe
# Make API calls
stackrun call stripe list_customers --limit 5
stackrun call stripe create_customer --email user@example.com --name "Jane Doe"
stackrun call stripe get_balance
# Pipe JSON output
stackrun call stripe list_customers --json | jq '.data[].email'
Available Tools
| Tool | Description | Auth | |------|-------------|------| | stripe | Stripe payments API | API key | | github | GitHub REST API | Bearer token | | notion | Notion workspace API | Bearer token | | slack | Slack messaging API | Bearer token | | hubspot | HubSpot CRM API | Bearer token | | sendgrid | SendGrid email API | Bearer token | | linear | Linear project management API | API key | | twilio | Twilio communications API (SMS, calls) | Basic auth | | jira | Jira project management API | Basic auth | | resend | Resend transactional email API | Bearer token | | vercel | Vercel deployment platform API | Bearer token | | cloudflare | Cloudflare DNS, Workers, and more | Bearer token | | openai | OpenAI API (GPT, DALL-E, embeddings) | Bearer token | | google | Google APIs (Gmail, Calendar, Drive) | OAuth2 |
Run stackrun search to see all available tools, or stackrun schema to see a tool's commands.
Discovering Commands
Use stackrun schema to see what a tool can do before calling it:
$ stackrun schema stripe
stripe v1.0.0 — Stripe payments API
Base URL: https://api.stripe.com/v1
Auth: api_key
Commands:
list_customers List all customers
--limit Maximum number of customers to return (optional, query)
create_customer Create a new customer
--email Customer email address (required, body)
--name Customer full name (optional, body)
get_balance Retrieve the current account balance
Use stackrun schema --json for machine-readable output.
Authentication
Most tools use API keys or bearer tokens:
stackrun login stripe --token sk_test_xxx # API key
stackrun login github --token ghp_xxx # Bearer token
OAuth2 (Google, etc.)
Tools with OAuth2 auth require a client ID. You can provide it via flag or environment variable:
# Via flags
stackrun login google --client-id YOUR_CLIENT_ID --client-secret YOUR_SECRET
# Via environment variables
export STACKRUN_OAUTH_CLIENT_ID=your_client_id
export STACKRUN_OAUTH_CLIENT_SECRET=your_secret
stackrun login google
This opens a browser for authorization. After you approve, the token is stored locally and refreshed automatically when it expires.
> Note: OAuth2 tools require you to register your own app with the provider (e.g., Google Cloud Console) and obtain client credentials.
Token storage
Tokens are stored in ~/.stackrun/tokens.json with 0o600 permissions (owner read/write only). To remove a stored token:
stackrun logout stripe
Agent Mode
Stackrun is designed for AI agents. Use --agent or --json for machine-readable output:
stackrun search --agent # JSON, no spinners, no color
stackrun call stripe list_customers --json # clean JSON to stdout
stackrun schema stripe --json # discover commands programmatically
Pipe detection is automatic: when stdout is not a TTY, output defaults to JSON.
MCP Server
Stackrun works as an MCP server. One Stackrun MCP server replaces N individual API servers — every installed tool becomes native tool calls for your AI agent.
stackrun mcp # start the MCP server (stdio)
stackrun mcp --list # preview which tools would be exposed
Each manifest command is exposed as _ (e.g., stripe_list_customers, github_get_user).
Claude Desktop
Add to claude_desktop_config.json:
{
"mcpServers": {
"stackrun": {
"command": "stackrun",
"args": ["mcp"]
}
}
}
Claude Code
claude mcp add stackrun -- stackrun mcp
Cursor
Add to .cursor/mcp.json:
{
"mcpServers": {
"stackrun": {
"command": "stackrun",
"args": ["mcp"]
}
}
}
Then install tools and authenticate — the agent can call them immediately:
stackrun install stripe && stackrun login stripe --token sk_test_xxx
# Now your agent can use stripe_list_customers, stripe_create_customer, etc.
Troubleshooting
Error: tool "X" is not installed
stackrun install X
Error: no token found for "X"
stackrun login X --token YOUR_TOKEN
Authentication failed (401)
Your token is invalid or expired. Re-authenticate:
stackrun logout X
stackrun login X --token NEW_TOKEN
Could not reach registry
Check your internet connection. The registry is hosted on GitHub — if raw.githubusercontent.com is blocked, set a custom registry URL:
export STACKRUN_REGISTRY_URL=https://your-mirror.com/registry
OAuth2: No client_id found
OAuth2 tools (like Google) require client credentials:
stackrun login google --client-id YOUR_ID --client-secret YOUR_SECRET
# Or use env vars: STACKRUN_OAUTH_CLIENT_ID, STACKRUN_OAUTH_CLIENT_SECRET
Development
# Clone the repo
git clone https://github.com/nico150891/stackrun.git
cd stackrun
npm install
# Scripts
npm run dev # run with ts-node
npm run build # compile to dist/
npm test # run tests (vitest)
npm run lint # eslint
npm run format # prettier
npm run typecheck # tsc --noEmit
Project Structure
src/
├── commands/ # CLI commands (search, install, uninstall, login, logout, call, list, schema, mcp)
├── mcp/ # MCP server and tool call handler
├── services/ # Business logic (registry, auth, executor, storage, validator, oauth)
├── types/ # TypeScript type definitions
└── index.ts # Entry point
registry/ # Tool manifests (JSON) — the MVP registry
tests/ # Unit and integration tests
Adding a New Tool
Create a JSON manifest in registry/ following the schema:
{
"name": "tool-name",
"version": "1.0.0",
"description": "What it does",
"base_url": "https://api.example.com/v1",
"auth": { "type": "bearer", "header": "Authorization", "prefix": "Bearer" },
"headers": { "X-Api-Version": "2024-01-01" },
"commands": [
{
"name": "list_items",
"method": "GET",
"path": "/items",
"description": "List all items",
"params": [
{ "name": "limit", "description": "Max results", "required": false, "location": "query", "type": "number" }
]
}
]
}
Then add it to registry/index.json. See [CONTRIBUTING.md](CONTRIBUTING.md) for the full workflow.
License
MIT
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: nico150891
- Source: nico150891/stackrun
- License: MIT
- Homepage: https://www.npmjs.com/package/@nico0891/stackrun
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.