Configuration

login providers and the default app authentication

Role based access control - 0 groups, 0 roles, 2 grants. Always enforced; changes are staged and go live on publish

the management REST API over HTTPS used by the OpenRun CLI on other machines, and the external url and token lifetimes shared by every API surface

Model Context Protocol access for AI clients: the app actions endpoint, the management endpoint and how to connect Claude Code, Codex or any MCP client

git credentials for private repos and the default entry

secret manager providers

server level defaults, app config and node config overrides

agent configs, git targets, builder profiles and builder settings