apps - floo

Every command that takes an app accepts its name or UUID.

list

List the apps in your organization.

floo apps list

Name         Status   Org    URL                              Created
my-app       live     acme   https://my-app.getfloo.app       2026-02-18T10:30:00Z
api-service  live     acme   https://api-service.getfloo.app  2026-02-20T09:12:00Z
landing      stopped  acme   https://landing.getfloo.app      2026-03-01T16:45:00Z

When more apps exist than fit on the page, human output ends with the --page value for the next page.

Flags

Flag	Description	Default
`--page N`	Page number	`1`
`--per-page N`	Results per page	`50`

JSON output

{
  "success": true,
  "data": {
    "apps": [
      {
        "id": "a1b2c3d4-...",
        "name": "my-app",
        "status": "live",
        "url": "https://my-app.getfloo.app",
        "created_at": "2026-02-18T10:30:00Z"
      }
    ],
    "total": 3,
    "page": 1,
    "per_page": 50
  }
}

show

Show details for one app. Pass the app positionally or with --app, not both; with neither, the app comes from local config.

floo apps show my-app
floo apps show --app my-app

my-app
  Status:   live
  URL:      https://my-app.getfloo.app
  Org:      acme
  ID:       a1b2c3d4-...
  Created:  2026-02-18T10:30:00Z
  Envs:     dev  https://my-app-dev.getfloo.app
            prod  https://my-app.getfloo.app
  Identity: dev  floo-0123456789abcdef0123-np@<project>.iam.gserviceaccount.com
            prod  floo-0123456789abcdef0123@<project>.iam.gserviceaccount.com

Identity is the service account each environment runs as. Grant it access to your own cloud resources, as in Query a private BigQuery dataset. An environment with no dedicated identity shows — (no dedicated identity) and null in JSON.

JSON output

{
  "success": true,
  "data": {
    "id": "a1b2c3d4-...",
    "name": "my-app",
    "status": "live",
    "url": "https://my-app.getfloo.app",
    "created_at": "2026-02-18T10:30:00Z",
    "envs": [
      {
        "name": "dev",
        "url": "https://my-app-dev.getfloo.app",
        "runtime_service_account": "floo-0123456789abcdef0123-np@<project>.iam.gserviceaccount.com"
      },
      {
        "name": "prod",
        "url": "https://my-app.getfloo.app",
        "runtime_service_account": "floo-0123456789abcdef0123@<project>.iam.gserviceaccount.com"
      }
    ]
  }
}

delete

Permanently delete an app, its data, and the repository floo hosts for it. A connected GitHub repository of your own is kept.

floo apps delete my-app

⚠ You are about to permanently delete app 'my-app'.
    id:   a1b2c3d4-...
    This destroys all services, env vars, managed services, domains, deploy history, and the repository floo hosts for the app.
    Connected customer-owned GitHub repositories are retained.

This is irreversible. Data will not be recoverable.
Type the resource name (my-app) to confirm, or anything else to cancel:
my-app
✓ Deleted app 'my-app'.

Deletion destroys data: interactive mode requires typing the app name; non-interactive runs require --yes-i-know-this-destroys-data.

Flags

Flag	Description
`--yes-i-know-this-destroys-data`	Skip the name-confirmation prompt. Required in non-interactive contexts (CI, `--json`, pipes). Deliberately verbose: destroying an app and its data must be an explicit, acknowledged decision.
`--preflight`	Show what would be deleted without deleting it

JSON output

{
  "success": true,
  "data": {
    "id": "a1b2c3d4-...",
    "destructive": true,
    "data_loss": true,
    "tier": 3
  }
}

password

Shared-password access was retired in platform release v2026.10.07.1. Older CLIs can still list the password command, but the platform no longer provides it. Use accounts for per-user sign-in or app API keys for program access.

invite

Invite a floo identity to an accounts-mode app with an explicit app role.

floo apps invite teammate@acme.com --role member --app my-app

Arguments

Argument	Description
`EMAIL`	Email address to invite

Flags

Flag	Description
`--app APP`	App name or UUID (inferred from config if omitted)
`--role ROLE`	Tenant role after acceptance: `member` or `admin` (default `member`)

The raw invitation URL is returned once and treated as a secret: it is redacted from JSON and omitted from human output unless you pass the global --reveal-secrets flag. The invitation stays valid if email delivery fails; resend with --reveal-secrets to rotate and copy a fresh URL. App access never grants dashboard or deployment access; see Team, roles, and API keys.

invites

List invitation history for an app.

floo apps invites --app my-app

List responses include next_cursor when another page exists. Continue with --cursor NEXT_CURSOR; floo apps members accepts the same flag. Rotate and resend a pending invitation, or revoke it:

floo apps invite-resend INVITE_ID --app my-app
floo apps invite-revoke INVITE_ID --app my-app

Resending invalidates the previous URL. Revoked and expired invitations cannot be accepted.

members

List active explicit app members.

floo apps members --app my-app

Change an app role (member or admin) or remove app access:

floo apps member-role MEMBERSHIP_ID admin --app my-app
floo apps member-remove MEMBERSHIP_ID --app my-app

Changing a role revokes active app sessions that carry the old role. Removing a member also revokes that person’s app sessions and user-bound app API keys.

consumers

Manage named consumers for app API keys. See App API keys and request history for route scopes and storing a key through a pipe.

floo apps consumers list --app my-app
floo apps consumers create daily-report --app my-app
floo apps consumers delete daily-report --app my-app

Deletion takes a consumer ID or case-insensitive name and revokes all its active keys. It requires typed confirmation, or the flag below in non-interactive or JSON mode:

floo apps consumers delete daily-report --app my-app --yes-i-know-this-destroys-data

Flags

Flag	Description
`--app NAME`	App name (defaults to the app in local config)
`--yes-i-know-this-destroys-data`	Confirm consumer deletion in non-interactive or JSON mode

keys

Create, list, and revoke a consumer’s app API keys.

floo apps keys list --consumer daily-report --app my-app
floo apps keys create reader --consumer daily-report --scope reports.access --rate-limit-rpm 60 --app my-app
floo apps keys revoke KEY_ID --app my-app

Revocation takes a key ID and is idempotent.

Flags

Flag	Description
`--app NAME`	App name (defaults to the app in local config)
`--consumer NAME_OR_ID`	Required for list and create; accepts an ID or a case-insensitive name
`--scope SCOPE`	Required for create; repeat for multiple scopes. `--scope '*'` explicitly grants every scope
`--rate-limit-rpm N`	Per-key requests per minute for create, `1` to `100000` (server default `600`)

Human mode prints only the raw key on stdout; the shown-once notice and the key’s ID, prefix, and scopes go to stderr. The key cannot be retrieved again, so store it directly in the program’s secret store. See the guide’s piping example.

JSON output

With --json, raw_key is redacted unless you pass the global --reveal-secrets flag. The output sets contains_secrets: true in either case.

github

Connect a GitHub repo for auto-deploy on push. Full reference: GitHub Integration.

floo apps github connect owner/repo --app my-app
floo apps github disconnect --app my-app
floo apps github status --app my-app

Errors

Code	Meaning
`NOT_AUTHENTICATED`	Run `floo auth login` first
`APP_NOT_FOUND`	No app with that name or ID. Check with `floo apps list`
`APP_CONSUMER_NAME_TAKEN`	A consumer with that name already exists in the app
`APP_CONSUMER_CAP_REACHED`	The app has reached its limit of 50 consumers
`APP_CONSUMER_KEY_CAP_REACHED`	The consumer has reached its limit of 100 active keys
`INVALID_SCOPE_LABEL`	A scope label is invalid
`APP_CONSUMER_NOT_FOUND`	No consumer with that name or ID in the selected app
`APP_API_KEY_NOT_FOUND`	No app API key with that ID in the selected app
`INSUFFICIENT_KEY_SCOPE`	Your floo API key lacks the required scope
`APP_DELETING`	The app is being deleted

​list

​Flags

​JSON output

​show

​JSON output

​delete

​Flags

​JSON output

​password

​invite

​Arguments

​Flags

​invites

​members

​consumers

​Flags

​keys

​Flags

​JSON output

​github

​Errors

list

Flags

JSON output

show

JSON output

delete

Flags

JSON output

password

invite

Arguments

Flags

invites

members

consumers

Flags

keys

Flags

JSON output

github

Errors