Whether you're deploying your app with GitHub Actions or running your own CD service, it's best to avoid configuring deployment infrastructure with all-powerful tokens. Deploy tokens can be used with
flyctl to manage a single application and its resources.
To get started, generate a deploy token on the Tokens tab of your app dashboard. Alternatively, run
flyctl tokens create deploy to generate an app deploy token from the command line. Instruct
flyctl to use your new token by setting it in the
FLY_API_TOKEN environment variable.
FLY_API_TOKEN=$(flyctl tokens create deploy) flyctl deploy
Whereas API tokens (
fly auth token) can manage all of your organizations' apps, deploy tokens are limited to a single application. Some organization-wide features like managing Wireguard tunnels are integral to deployments and are also accessible to deploy tokens.