feat: add runway api plugin#172
Open
saoudrizwan wants to merge 2 commits into
Open
Conversation
Contributor
Author
|
Closing this plugin PR for now because this cleanup pass is limiting plugin marketplace PRs to plugins that only bundle MCP servers and/or skills. This PR includes additional plugin primitive(s): rules. Those primitives may still be useful, but we are keeping this batch scoped to MCP and skill distribution. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
runway-api
Adds a Runway API plugin for Cline users who want to generate media directly from Runway's API or add Runway-powered media generation features to server-side applications.
Cline Primitives
Requirements
Users need a Runway developer account with available credits. Direct generation with the Python helpers needs
uvandRUNWAYML_API_SECRETin the environment or a user-created local env file. The generaluse-runway-apihelper uses the sameRUNWAYML_API_SECRETvariable and also supports the source helper'sRUNWAY_SKILLS_API_SECRETalias.Integration workflows require a server-side application. The skills cover Node.js, Python, and common full-stack/serverless frameworks, but they explicitly reject frontend-only API-key usage.
Trust Boundaries
Runway API calls can spend credits, upload user media, fetch external media URLs, create account-visible resources, and return signed output URLs. The plugin tells Cline not to ask users to paste API keys into chat, not to put secrets in frontend code or committed files, and to confirm paid generation, uploads, target media, output locations, and production code changes before acting.
Copied app templates include basic host allowlists for external media URLs and file size/type checks for upload examples. Local media should prefer Runway upload URIs, while browser-supplied raw URLs should be rejected unless they come from trusted HTTPS origins.