Deploy Tokens

Deploy tokens are an experimental feature. They may be less reliable than traditional API tokens. Use them with caution and visit our community forum for help.

Whether you're deploying your app with GitHub Actions or running your own CD service, it's best to avoid configuring deployment infrastructure with all-powerful tokens. Deploy tokens can be used with flyctl to manage a single application and its resources.

To get started, generate a deploy token on the Tokens tab of your app dashboard. Alternatively, run flyctl tokens create deploy to generate an app deploy token from the command line. Instruct flyctl to use your new token by setting it in the FLY_API_TOKEN environment variable.

FLY_API_TOKEN=$(flyctl tokens create deploy) flyctl deploy

Whereas API tokens (fly auth token) can manage all of your organizations' apps, deploy tokens are limited to a single application. Some organization-wide features like managing Wireguard tunnels are integral to deployments and are also accessible to deploy tokens.