Fly.io
Arcade tools designed for LLMs to interact with Fly.io
1.0.2Fly.io toolkit for Arcade enables LLMs to manage the full Fly.io application lifecycle — machines, volumes, deployments, networking, secrets, and observability — via the Fly.io API.
Capabilities
- App & release management: list, inspect, and deploy apps across organizations; browse full release history and roll out new container images to all machines in one call.
- Machine lifecycle: create, start, stop, restart, and permanently destroy machines; scale machine count up or down or change VM size/memory across an app.
- Persistent storage: create, extend, list, and destroy volumes attached to apps (volumes can only grow, not shrink).
- Networking & TLS: allocate or release dedicated IP addresses; add, check, and remove custom-domain TLS certificates with DNS record guidance.
- Secrets management: set or unset app secrets (with optional immediate rollout); list secret names (values are never returned by Fly.io).
- Observability: read recent app logs with optional filters — note log access requires a token with explicit log-read permission; missing access returns a
no_accessstatus rather than an error, so branch onstatusrather than assuming log data is present.
Secrets
FLYIO_ACCESS_TOKEN — A Fly.io personal access token or deploy token used to authenticate every API call. To obtain one, log in to the Fly.io dashboard, navigate to Account → Access Tokens, and create a new token. For full app-management access (machines, volumes, deployments, networking, secrets), a standard personal access token is sufficient. Log reading is a separate capability: if Flyio.GetLogs must work, the token must explicitly have log-read access granted — a standard token without it will cause that tool to return no_access. If you are using deploy tokens (scoped to a single app), verify which permissions were selected at token creation time.
See the Fly.io API tokens documentation for full details on token types and scopes.
Configure this secret in Arcade following the Arcade secrets guide, or manage secrets directly at https://api.arcade.dev/dashboard/auth/secrets.
Available tools(30)
| Tool name | Description | Secrets | |
|---|---|---|---|
Add a TLS certificate for a hostname and return the DNS records to set. | 1 | ||
Allocate a new IP address for an app. | 1 | ||
Check a certificate's validation status and any pending DNS records. | 1 | ||
Create a new Machine for an app from a container image. | 1 | ||
Create a new persistent volume for an app. | 1 | ||
Roll a new container image out to all of an app's Machines. | 1 | ||
Permanently destroy a Machine. Stop it first unless force is set. | 1 | ||
Permanently destroy a volume and the data it holds. | 1 | ||
Grow a volume to a larger size. Volumes cannot be shrunk. | 1 | ||
Get the current status of a single Fly.io app. | 1 | ||
Read recent historical log entries for an app, optionally filtered.
Reading logs requires a token granted log-read access, which is a capability
separate from app management; a token without it cannot read logs at all. When
that access is missing this returns a ``no_access`` result rather than raising,
so prefer branching on the result's ``status`` over assuming logs are present. | 1 | ||
Get the configuration, state, and health of a single Machine. | 1 | ||
List Fly.io apps, optionally scoped to a single organization.
Apps are returned in Fly.io's own ordering, with pagination metadata so a
caller can tell when more apps exist beyond the returned window. | 1 | ||
List the custom-domain TLS certificates configured on an app. | 1 | ||
List the IP addresses assigned to an app, including the shared IPv4. | 1 | ||
List the Machines that belong to an app. | 1 | ||
List the Fly.io organizations the configured token can access. | 1 | ||
List the Fly.io regions available for deploying apps and volumes. | 1 | ||
List an app's release history, newest first. | 1 | ||
List an app's secret names. Secret values are never returned by Fly.io. | 1 | ||
List the persistent volumes that belong to an app. | 1 | ||
Release a dedicated IP address so it is no longer assigned to the app. | 1 | ||
Remove a custom-domain TLS certificate from an app. | 1 | ||
Restart a Machine and report its settled state. | 1 | ||
Scale an app to a target Machine count by adding or removing Machines. | 1 |