@runnel-link/cli

CLI, Claude Code skill, and MCP server for Runnel — private, revocable, end-to-end-encrypted share links. The link key is generated on your machine and never sent to the server: Runnel stores only ciphertext. Destinations of links you mint are viewable in your own dashboard — the server never holds anything it can decrypt.

Install

npm install -g @runnel-link/cli

Requires Node 20+. Get an API key in the Runnel dashboard's API keys page (app.runnel.link/keys), then:

runnel auth login        # paste the key at the hidden prompt

Use

runnel mint https://example.com/report.pdf --ttl 7d --max-uses 3 --label "Q3 report"
runnel list
runnel revoke <id>
runnel usage

The minted link is printed once and cannot be recovered later — save it.

Reading destinations

Link destinations are end-to-end encrypted; the server cannot read them. To see them in runnel list, pair this machine once: open your dashboard's API keys page, click Show pairing key, then run runnel auth pair and paste it. Your API key also needs the reveal permission (a checkbox at key creation).

The pairing key can decrypt your link destinations. It is stored with mode 0600 and never sent to Runnel; treat it like an SSH private key. Remove it with runnel auth logout.

MCP

Local (Claude Desktop, Claude Code, Cursor, VS Code)

{ "command": "npx", "args": ["-y", "@runnel-link/cli", "mcp"], "env": { "RUNNEL_API_KEY": "rnl_..." } }

Tools: mint_link, list_links, revoke_link, get_usage. To include destinations in list_links, pair the machine (see Reading destinations above).

Remote (claude.ai, ChatGPT)

No install needed: add https://app.runnel.link/mcp as a connector in the app's settings and approve access in your browser. Destinations are readable only if you tick "Allow reading destinations" at consent; revoke any time under Connected apps on the API keys page.

Claude Code skill

runnel skill install     # copies the bundled skill to ~/.claude/skills/runnel/