assets_put
Upload an asset (any size, up to 5 TiB) via direct-to-S3 presigned URLs. Returns an AssetRef with scriptTag() / linkTag() / imgTag() emitters.
How to use it
assets_put is exposed by the Run402 MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the assets_put tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.
Install Run402
npx --yes skills@latest add https://run402.com -s run402-buzz -a codex -yOther tools in Run402 (39)
Moderate text (free).
Translate text. Metered per project.
Translation quota (used / included / remaining).
Apply the declarative authorization manifest (tables, views, RPCs). Convergent: drops items removed between applies.
Download an asset to a local file.
Keyset-paginated list with prefix filter.
Delete an asset.
Time-boxed presigned GET URL for a private asset.
Configure password set, preferred sign-in method, public signup policy, and project-admin passkey enforcement.
Browse public forkable apps.
7
Create a GitHub Actions CI deploy binding from a locally signed delegation. Optional routescopes delegate exact paths like /admin or final wildcards like /api/; omitted means no CI route authority.
Claim <name>.run402.com (idempotent; reassigns to latest deployment on subsequent deploys).
Cascade purge: schema, Lambdas, S3 site files, deployments, secrets, published versions. Irreversible.
Delete a manual snapshot and release its CAS references.
URL-first deploy resolver diagnostics. Params: projectid, either url or host/path, optional method; returns wouldserve, diagnosticstatus, match, warnings, next steps, and fenced JSON.
Deploy a Node 22 serverless function; use ReleaseSpec triggers[] for schedule or email event durable runs.
Deploy a static site from inline file bytes.
Deploy a static site from a local directory. Routes through the unified apply primitive (CAS-backed); only uploads bytes the gateway doesn't have.
Live CDN state for a public URL: expected vs observed SHA, cache headers, invalidation status.
Text-to-PNG via x402 ($0.03 / image).
Return the current manifest. source is either applied (from the tracking table) or introspected (regenerated from live DB state).
Recent logs (CloudWatch), filterable by since and routed requestid.
Introspect tables, columns, types, constraints, RLS policies.
Per-project usage report (API calls, storage, lease expiry).
Invoke a deployed function over the direct API-key-protected path. Paid calls require idempotencykey and may return a pollable runid; set wait to replay the retained result.
Call an arbitrary HTTP(S) URL, satisfy a supported exact x402 challenge up to maxusdmicros (default 100000), optionally require verified merchant evidence with requirereceipt, and return x402-commerce-result.v1.
tools
Provision a new database. Auto-handles x402 payment.
Request link, code, or both passwordless email credentials; code modes return an opaque challenge handle.
Query/mutate via PostgREST.
Two-step restore: first returns a restore plan plus confirm token; second call with confirm flips the project to the materialized snapshot and reports next actions.
Execute SQL (DDL or queries). Returns a markdown table.
Template (projectinvite, magiclink, notification) or raw HTML. Single recipient. Omitting mailbox uses the configured outbound default; result echoes mailboxid and fromaddress when returned.
Change, reset, or set a user's password.
Update timeout / memory without redeploying code; use ReleaseSpec triggers[] for new schedule/email triggers.
Validate the auth/expose manifest without applying it. Accepts manifest object/string, optional migrationsql, optional projectid.
Exchange either a link token or challenge handle + six-digit code for accesstoken + refreshtoken.
Poll a mutable URL until it serves the expected SHA-256.