# Executor Documentation

> Reference for Executor, the open-source integration layer that exposes one tool catalog across CLI, HTTP API, MCP, and TypeScript SDK runtimes. Covers local daemon, hosted cloud, self-host deployments, credentials, policies, and code execution.

This is a Grok-Wiki source-grounded repository documentation set. Use the complete Markdown link when an agent needs the full repo context.

## Context Links

- [Complete Markdown docs](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/llms-full.txt)
- [Complete Markdown alias](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052.md)
- [Human interactive docs](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052)
- [GitHub repository](https://github.com/RhysSullivan/executor)

## Repository

- Repository: RhysSullivan/executor

- Generated: 2026-06-23T19:29:14.099Z
- Updated: 2026-06-23T19:30:14.094Z
- Runtime: Grok CLI
- Format: Documentation
- Pages: 24

## Pages

- [Overview](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/01-overview.md): What Executor exposes (CLI, web UI, HTTP API, MCP, SDK), runtime forms (local, cloud, self-host), and the shortest path from install to first tool call.
- [Installation](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/02-installation.md): Install the published CLI globally, bootstrap a development checkout, and verify the background service starts with expected ports and data directories.
- [Quickstart](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/03-quickstart.md): Run `executor install`, open the web UI, add a first integration, search and call a tool, and resume a paused execution.
- [MCP proxy](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/04-mcp-proxy.md): How Executor acts as a single MCP endpoint in front of OpenAPI, GraphQL, and upstream MCP integrations with shared auth and per-tool policies.
- [Tools](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/05-tools.md): Tool addresses, discovery, schema inspection, invocation paths, and how tools are produced per connection across CLI, HTTP API, and MCP surfaces.
- [Integrations](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/06-integrations.md): Tenant-level catalog identities for OpenAPI specs, GraphQL endpoints, MCP servers, and plugin-registered sources; detection, registration, and auth method descriptors.
- [Connections](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/07-connections.md): Owner-scoped credentials bound to integrations, credential provider resolution, OAuth minting, and the `(owner, integration, name)` identity model.
- [Policies](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/08-policies.md): Per-tool allow, require-approval, and block actions; pattern matching, effective policy resolution, and default annotations derived from integration specs.
- [Executions](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/09-executions.md): Code-mode execution via QuickJS, paused states for auth and approval, `execute` and `resume` HTTP routes, and MCP elicitation handling.
- [Add integrations](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/10-add-integrations.md): Add OpenAPI, GraphQL, and MCP sources from the web UI or CLI, including spec URLs, namespaces, base URLs, and post-add verification with `tools sources`.
- [Connect MCP clients](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/11-connect-mcp-clients.md): Wire Cursor, Claude Code, OpenCode, and other MCP clients via stdio (`executor mcp`) or streamable HTTP, including `add-mcp` setup and client restart requirements.
- [Configure credentials](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/12-configure-credentials.md): Credential providers (file secrets, keychain, 1Password, encrypted stores), connection creation payloads, OAuth flows, and placement-based auth templates.
- [Manage policies](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/13-manage-policies.md): Create and update owner-scoped tool policies, interpret effective policy precedence, and handle approval pauses from the web UI, MCP, and CLI resume flow.
- [Embed with the SDK](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/14-embed-with-the-sdk.md): Compose `createExecutor` with plugins and credential providers, register integrations, create connections, list and invoke tools, and shut down cleanly in application code.
- [Deploy self-hosted](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/15-deploy-self-hosted.md): Run Executor in Docker or on Cloudflare Workers: image defaults, volume mounts, bootstrap admin env vars, TLS/public-origin requirements, and sandbox network constraints.
- [Executor Cloud](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/16-executor-cloud.md): Hosted Executor Cloud entry points, sign-in flow, shared MCP endpoint usage, and how cloud deployments differ from local daemon and self-host runtimes.
- [CLI reference](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/17-cli-reference.md): All `executor` subcommands and flags: `install`, `web`, `daemon`, `service`, `mcp`, `call`, `resume`, `tools`, `server`, `login`, and auto-start behavior.
- [HTTP API reference](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/18-http-api-reference.md): Core Executor HTTP API groups: `tools`, `integrations`, `connections`, `providers`, `executions`, `oauth`, and `policies` routes, payloads, and error shapes.
- [SDK reference](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/19-sdk-reference.md): `@executor-js/sdk` exports: `createExecutor`, plugin wiring, tool listing and invocation, connection APIs, policy helpers, typed IDs, and promise-mode entry points.
- [Configuration reference](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/20-configuration-reference.md): Environment variables and runtime paths: `EXECUTOR_DATA_DIR`, `EXECUTOR_SCOPE_DIR`, `EXECUTOR_WEB_BASE_URL`, secret keys, bootstrap admin, ports, and client-specific overrides.
- [SDK quickstart example](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/21-sdk-quickstart-example.md): Walkthrough of `examples/docs-sdk-quickstart`: in-memory credential provider, OpenAPI `addSpec`, connection creation, tool listing, schema inspection, and shutdown.
- [Plugin catalog](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/22-plugin-catalog.md): Published protocol and provider plugins (OpenAPI, GraphQL, MCP, file-secrets, keychain, 1Password, Google, WorkOS Vault) and how `examples/all-plugins` wires them together.
- [Develop locally](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/23-develop-locally.md): Monorepo bootstrap, turbo dev servers, package boundaries, targeted Vitest runs, e2e boot recipes, and release-check scripts for contributors.
- [Troubleshooting](https://grok-wiki.com/public/docs/rhyssullivan-executor-564383868052/pages/24-troubleshooting.md): Common failure modes: daemon port conflicts, unreachable local server, OAuth login state behind proxies, stale Vite caches, missing bootstrap builds, and recovery commands.

## Source Files

- `AGENTS.md`
- `apps/cli/bin/executor.ts`
- `apps/cli/package.json`
- `apps/cli/src/daemon-state.ts`
- `apps/cli/src/daemon.ts`
- `apps/cli/src/installation.ts`
- `apps/cli/src/integrations.ts`
- `apps/cli/src/local-server-manifest.ts`
- `apps/cli/src/main.ts`
- `apps/cli/src/server-connection.ts`
- `apps/cli/src/server-profile.ts`
- `apps/cli/src/service.ts`
- `apps/cloud/executor.config.ts`
- `apps/cloud/package.json`
- `apps/docs/concepts/connections.mdx`
- `apps/docs/concepts/integrations.mdx`
- `apps/docs/concepts/policies.mdx`
- `apps/docs/hosted/cloud.mdx`
- `apps/docs/hosted/cloudflare.mdx`
- `apps/docs/hosted/docker.mdx`
- `apps/docs/index.mdx`
- `apps/docs/local/cli.mdx`
- `apps/docs/mcp-proxy.mdx`
- `apps/host-cloudflare/executor.config.ts`
- `apps/host-cloudflare/wrangler.jsonc`
- `apps/host-selfhost/.env.example`
- `apps/host-selfhost/docker-compose.yml`
- `apps/host-selfhost/Dockerfile`
- `apps/host-selfhost/executor.config.ts`
- `apps/local/package.json`
- `e2e/AGENTS.md`
- `e2e/setup/cloud.globalsetup.ts`
- `e2e/src/ports.ts`
- `examples/all-plugins/package.json`
- `examples/all-plugins/src/main.ts`
- `examples/docs-sdk-quickstart/package.json`
- `examples/docs-sdk-quickstart/src/main.ts`
- `package.json`
- `packages/core/api/src/api.ts`
- `packages/core/api/src/connections/api.ts`
- `packages/core/api/src/executions/api.ts`
- `packages/core/api/src/handlers/connections.ts`
- `packages/core/api/src/handlers/executions.ts`
- `packages/core/api/src/handlers/integrations.ts`
- `packages/core/api/src/handlers/oauth.ts`
- `packages/core/api/src/handlers/policies.ts`
- `packages/core/api/src/handlers/tools.ts`
- `packages/core/api/src/integrations/api.ts`
- `packages/core/api/src/oauth/api.ts`
- `packages/core/api/src/policies/api.ts`
- `packages/core/api/src/server/mcp-build.ts`
- `packages/core/api/src/tools/api.ts`
- `packages/core/execution/src/engine.ts`
- `packages/core/integrations-registry/package.json`
- `packages/core/sdk/package.json`
- `packages/core/sdk/src/connection.ts`
- `packages/core/sdk/src/elicitation.ts`
- `packages/core/sdk/src/errors.ts`
- `packages/core/sdk/src/executor.ts`
- `packages/core/sdk/src/http-auth.ts`
- `packages/core/sdk/src/ids.ts`
- `packages/core/sdk/src/integration.ts`
- `packages/core/sdk/src/oauth-service.ts`
- `packages/core/sdk/src/policies.ts`
- `packages/core/sdk/src/promise.ts`
- `packages/core/sdk/src/public-origin.ts`
- `packages/hosts/mcp/src/browser-approval-store.ts`
- `packages/hosts/mcp/src/browser-approval.ts`
- `packages/hosts/mcp/src/index.ts`
- `packages/hosts/mcp/src/tool-server.ts`
- `packages/kernel/runtime-quickjs/src/index.ts`
- `packages/plugins/file-secrets/package.json`
- `packages/plugins/file-secrets/src/sdk/plugin.ts`
- `packages/plugins/graphql/package.json`
- `packages/plugins/graphql/src/sdk/plugin.ts`
- `packages/plugins/keychain/src/sdk/plugin.ts`
- `packages/plugins/mcp/package.json`
- `packages/plugins/mcp/src/sdk/plugin.ts`
- `packages/plugins/onepassword/src/sdk/plugin.ts`
- `packages/plugins/openapi/package.json`
- `packages/plugins/openapi/README.md`
- `packages/plugins/openapi/src/promise.ts`
- `packages/plugins/openapi/src/sdk/plugin.ts`
- `README.md`
- `RELEASING.md`
- `RUNNING.md`
- `scripts/bootstrap.ts`
- `scripts/generate-doc-snippets.ts`
- `scripts/reap-dev-servers.ts`
- `turbo.json`
- `vision.md`
- `vitest.config.ts`