Unlisted Scripts

Unlisted raw URLs fetch without a token. The share page hides the body from strangers. Pro and Teams only.

Fetch

Unlisted raw URLs behave like public ones: no token. Treat the slug as a secret only in the weak sense that it is unguessable. Anyone who has the URL has the bytes.

Bash

curl -fsSL https://runny.sh/r/{slug} | bash

The share page does not show the body to signed-out visitors. Use private visibility when you need a credential.