Fly.io
Arcade tools designed for LLMs to interact with Fly.io
3.0.1Fly.io Toolkit
Arcade toolkit for interacting with Fly.io, enabling LLMs to manage the full lifecycle of Fly.io apps, machines, volumes, networking, and secrets programmatically.
Capabilities
- App & release management: List, inspect, and deploy apps across organizations; browse full release history and roll out new container images to all machines.
- Machine lifecycle: Create, start, stop, restart, and destroy individual machines; scale machine count up or down; resize VM compute and memory.
- Volumes: Create, list, grow, and permanently delete persistent volumes attached to apps.
- Networking & TLS: Allocate and release IP addresses; manage custom-domain TLS certificates including DNS validation record retrieval.
- Secrets: Set, list, and delete app secrets with optional immediate rollout; secret values are never returned by the Fly.io API.
- Observability & metadata: Read recent app logs (requires log-read access on the token; returns a
no_accessstatus rather than an error when access is missing), list available regions, and enumerate organizations accessible to the configured token.
Secrets
FLYIO_ACCESS_TOKEN — A Fly.io personal access token or deploy token used to authenticate all API requests. To create one, log in to the Fly.io dashboard or run fly tokens create deploy -a <app-name> with the Fly CLI. For full toolkit access (including log reading), ensure the token has both app-management and log-read capabilities; tokens scoped only to deployment will return no_access on Flyio.ListLogs. Store the token value in Arcade secrets: Arcade secrets config (or add it directly at https://api.arcade.dev/dashboard/auth/secrets).
Available tools(30)
| Tool name | Description | Secrets | |
|---|---|---|---|
Check a certificate's validation status and any pending DNS records. | 1 | ||
Add a TLS certificate for a hostname and return the DNS records to set. | 1 | ||
Allocate a new IP address for an app. | 1 | ||
Create a new Machine for an app from a container image. | 1 | ||
Create a new persistent volume for an app. | 1 | ||
Remove a custom-domain TLS certificate from an app. | 1 | ||
Release a dedicated IP address so it is no longer assigned to the app. | 1 | ||
Permanently destroy a Machine. Stop it first unless force is set. | 1 | ||
Remove one or more app secrets, optionally rolling the change out immediately. | 1 | ||
Permanently destroy a volume and the data it holds. | 1 | ||
Roll a new container image out to all of an app's Machines. | 1 | ||
Get the current status of a single Fly.io app. | 1 | ||
Get the configuration, state, and health of a single Machine. | 1 | ||
List Fly.io apps, optionally scoped to a single organization.
Apps are returned in Fly.io's own ordering, with pagination metadata so a
caller can tell when more apps exist beyond the returned window. | 1 | ||
List the custom-domain TLS certificates configured on an app. | 1 | ||
List the IP addresses assigned to an app, including the shared IPv4. | 1 | ||
Read recent historical log entries for an app, optionally filtered.
Reading logs requires a token granted log-read access, which is a capability
separate from app management; a token without it cannot read logs at all. When
that access is missing this returns a ``no_access`` result rather than raising,
so prefer branching on the result's ``status`` over assuming logs are present. | 1 | ||
List the Machines that belong to an app. | 1 | ||
List the Fly.io organizations the configured token can access. | 1 | ||
List the Fly.io regions available for deploying apps and volumes. | 1 | ||
List an app's release history, newest first. | 1 | ||
List an app's secret names. Secret values are never returned by Fly.io. | 1 | ||
List the persistent volumes that belong to an app. | 1 | ||
Restart a Machine and report its settled state. | 1 | ||
Scale an app to a target Machine count by adding or removing Machines. | 1 |