Quickstart
Run runelay with Docker or the desktop app, then migrate your agents in one command.
Install with Docker
curl -fsSL runelay.com/install | shThe script needs Docker with Compose v2 running. It:
- Creates
~/runelay(and~/runelay/data). - Downloads
compose.yamlfrom the latest GitHub release. - Writes a
.envwith a freshRUNELAY_SECRET, a one-time setup token and an updater token (mode600). An existing.envis kept. - Pulls the image and starts it on
127.0.0.1:4312.
At the end it prints the link to create the owner account (/login?mode=signup&token=…). Open it, create your account and follow Access → Set up agents.
Keep a copy of RUNELAY_SECRET. Without it, stored connections cannot be decrypted.
To change where and how it installs, see Installer options.
Or the desktop app
No Docker needed. Download runelay for:
- Mac (Apple silicon)
- Mac (Intel)
- Windows
- Linux (AppImage, also for arm64)
The app runs the same server on 127.0.0.1:4312, so the CLI and your agents find it on their own. Data lives in the app folder (~/Library/Application Support/runelay on Mac). The secret is kept in the system keychain when one is available.
The builds are not signed yet. On Mac, right-click the app and choose Open the first time. On Windows, choose More info → Run anyway. Keep the app running while your agents use it: quitting it stops the server.
Migrate in one command
On the computer where your agents live:
curl -fsSL runelay.com/cli | sh
runelay migratemigrate logs in through the browser if needed, then reads Claude Code, Codex, Cursor, Grok, Gemini and OpenCode: MCP servers, memories, skills and global instructions. It shows a summary per agent, asks once and sends everything.
- Comes connected: OAuth accounts the agent already logged into. runelay reads the tokens Grok keeps in
~/.grok/mcp_credentials.jsonand, on macOS, the ones Codex and Claude Code keep in the Keychain (macOS may ask for permission). Servers that authenticate with headers come connected too. - Asks for login: everything else, including Cursor accounts (Cursor encrypts its tokens). At the end the CLI opens
/connectors/reconnect, a queue that walks you through the remaining logins one tab at a time. - Stays on the agent: local command servers (stdio). Add them from the panel if you want them in runelay.
- Token rotation: many providers rotate the refresh token on use. Once runelay refreshes it, the old agent may ask you to log in again. Run with
--replaceto remove the migrated MCPs from the agents and leave only runelay.
runelay migrate --yes skips the confirmation (required without a terminal). Tokens are sent only to your server and stored encrypted.