Critical-risk tools in Run402

Operator moderation action — archive a single project (sets

Delete a blob from project storage and decrement the project

Revoke one CI/OIDC deploy binding. Revocation stops future CI gateway requests, but does not undo already deployed releases or rotate secrets.

Delete a deployed function from a project.

Delete the project

Delete a webhook. Idempotent — succeeds even if already deleted.

Delete one authenticated-user passkey by id.

Immediately and irreversibly delete a project: the gateway runs the full destructive cascade (drop tenant schema, delete Lambda functions, release subdomains, tombstone mailbox,...

Delete a secret from a project.

Schedule the KMS key for a signer for deletion (7-day AWS minimum window). Refused if the signer has on-chain balance ≥ dust — drain first.

Release a custom subdomain. The URL will stop serving content.

Delete a published app version.

Drain a KMS signer

Cancel a queued or running managed job.

Purge all managed job runs for a project, terminating known active runners first.

Release a custom domain mapping. Traffic to the domain will no longer route to Run402.

Remove a member from an org. Requires an active

Remove a project

Revoke a per-project capability grant by id. Params:

Accept an incoming WALLET transfer (v1.93+). Your wallet must equal the transfer

Create a new local agent allowance (Base Sepolia testnet). Generates a private key and derives the Ethereum address. Saved to ~/.config/run402/allowance.json.

Submit a smart-contract write call from a KMS signer. The gateway encodes via viem, signs the digest via AWS KMS, and broadcasts. Idempotent on optional idempotency_key. Cost: c...

Create a Stripe checkout URL for an organization. Products: balance_topup, tier, email_pack.

Issue a per-project capability grant to a wallet (for agent/CI principals that aren

Generate a PNG image from a text prompt. Costs $0.03 USDC via x402. Aspect ratios: square (1:1), landscape (16:9), portrait (9:16).

Initiate a project transfer (owned-org recipient shape v1.96+). Addressed to a WALLET (

Provision an AWS KMS-backed Ethereum signer for signing smart-contract write transactions. Private keys never leave KMS. Cost: $0.04/day rental ($1.20/month) plus $0.000005 per ...

Request free testnet USDC from the Run402 faucet (Base Sepolia). Rate limit: 1 per IP per 24h. Returns 0.25 USDC — enough for 2 prototype databases.

Enable or disable automatic email pack repurchase when credits drop below a threshold. Requires a saved Stripe payment method.

Subscribe, renew, or upgrade tier. Auto-detects action based on allowance state. Returns success or payment details if x402 payment is needed.