Deploy tokens & CI

aloof tokens create -a my-app --expiry 90d     # app-scoped (or --org for every app in the account)
aloof tokens list ; aloof tokens revoke tok_...

A deploy token (dt_...) can deploy, scale, set secrets and read logs for its app, including the app's previews and worker groups. It can't manage tokens, billing, auth or admin endpoints. Expired or revoked tokens stop working immediately, and the audit log records which token did what.

GitHub Actions

name: deploy
on: {push: {branches: [main]}}
jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: sachinchandra/aloof/.github/actions/deploy@main
        with:
          token: ${{ secrets.ALOOF_API_TOKEN }}
          # app: my-app        (defaults to aloof.toml)

Or skip the action: curl -fsSL https://api.aloof.si/cli/aloof -o aloof && ALOOF_API_TOKEN=... python3 aloof deploy.