Drop-to-run/drop2run-cli

Source for the two Drop2Run packages that run on your machine: the drop2run
command line tool and the @drop2run/mcp server.
Both are installed globally and then handed a credential. This repository exists so you can read what
you are giving that credential to.
Using them
The command line tool signs in through a browser and publishes a folder:
login needs a browser on the same machine; drop2run login --device covers a remote shell, and CI
uses a DROP2RUN_TOKEN from . The other commands are init,
ls, open, rollback, rm, token list, whoami and where, and --json on any of them
prints machine-readable output.
The MCP server is registered with a client rather than run by hand. Claude for macOS and Windows
installs it from a bundle — download drop2run.mcpb and open it,
and there is no config file and nothing to install first. Claude Code takes one command:
A chat that cannot run a package — Claude on the web or a phone, ChatGPT — adds the hosted copy of the
same server by URL instead, https://mcp.dropto.run/mcp, and signs in to Drop2Run when it connects. In
Claude it is also listed in the
connector directory. Its
tools come from packages/mcp here (src/remote.ts); the sign-in in front of them does not. It
publishes text files only, and the setup is at dropto.run/docs/mcp.
It exposes twenty tools, in five groups:
| Group | Tools |
|---|---|
| Publish | publish_files, publish_dir — the second reads a folder on disk, so it is local only |
| Sites | list_sites, list_folders, get_site, update_site, pause_site, resume_site, rollback_site, change_subdomain, delete_site |
| Sharing | list_people, invite_people, remove_person |
| Comments | list_comments, reply_comment, resolve_comment, reopen_comment |
| Sign-in | login, login_code — local server only; the hosted copy signs in when it connects |
The publishes answer with structured fields beside the sentence, so a URL does not have to be read back
out of prose. delete_site and change_subdomain ask for the site's current subdomain repeated back
before they run; pause_site is the reversible way to take a site off the air. The token goes to the
same place the CLI stores one, so signing in through either covers both.
Each package documents itself in full, including the sign-in flows and what happens without a
site: packages/cli/README.md and
packages/mcp/README.md. The hosted documentation is at
dropto.run/docs/cli and
dropto.run/docs/mcp.
What is in here
| Package | Published | What it is |
|---|---|---|
| packages/cli | drop2run | The command line tool: login, deploy, ls, rollback, rm |
| packages/mcp | @drop2run/mcp | An MCP server, so an agent can publish what it just wrote |
| packages/core | no | The deploy engine — manifest, hashing, upload, go-live. No Node APIs, no browser APIs |
| packages/node | no | The parts that need fs: reading a folder, the config file, the token store |
core and node are not published. They are bundled into each package's dist/ at build time, which