Skip to Content
runelay

Quickstart

Run runelay with Docker or the desktop app, then migrate your agents in one command.

Install with Docker

curl -fsSL runelay.com/install | sh

The script needs Docker with Compose v2 running. It:

  1. Creates ~/runelay (and ~/runelay/data).
  2. Downloads compose.yaml from the latest GitHub release.
  3. Writes a .env with a fresh RUNELAY_SECRET, a one-time setup token and an updater token (mode 600). An existing .env is kept.
  4. Pulls the image and starts it on 127.0.0.1:4312.

At the end it prints the link to create the owner account (/login?mode=signup&token=…). Open it, create your account and follow Access → Set up agents.

Keep a copy of RUNELAY_SECRET. Without it, stored connections cannot be decrypted.

To change where and how it installs, see Installer options.

Or the desktop app

No Docker needed. Download runelay for:

The app runs the same server on 127.0.0.1:4312, so the CLI and your agents find it on their own. Data lives in the app folder (~/Library/Application Support/runelay on Mac). The secret is kept in the system keychain when one is available.

The builds are not signed yet. On Mac, right-click the app and choose Open the first time. On Windows, choose More info → Run anyway. Keep the app running while your agents use it: quitting it stops the server.

Migrate in one command

On the computer where your agents live:

curl -fsSL runelay.com/cli | sh
runelay migrate

migrate logs in through the browser if needed, then reads Claude Code, Codex, Cursor, Grok, Gemini and OpenCode: MCP servers, memories, skills and global instructions. It shows a summary per agent, asks once and sends everything.

  • Comes connected: OAuth accounts the agent already logged into. runelay reads the tokens Grok keeps in ~/.grok/mcp_credentials.json and, on macOS, the ones Codex and Claude Code keep in the Keychain (macOS may ask for permission). Servers that authenticate with headers come connected too.
  • Asks for login: everything else, including Cursor accounts (Cursor encrypts its tokens). At the end the CLI opens /connectors/reconnect, a queue that walks you through the remaining logins one tab at a time.
  • Stays on the agent: local command servers (stdio). Add them from the panel if you want them in runelay.
  • Token rotation: many providers rotate the refresh token on use. Once runelay refreshes it, the old agent may ask you to log in again. Run with --replace to remove the migrated MCPs from the agents and leave only runelay.

runelay migrate --yes skips the confirmation (required without a terminal). Tokens are sent only to your server and stored encrypted.

On this page