---
title: "Fly integration for LuumenAI"
url: "https://www.luumen.ai/integrations/fly/"
entity: SoftwareIntegration
category: "Source control & CI/CD"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Fly integration for LuumenAI

Read Fly apps, machines, and certificates; make changes as approved steps

## What LuumenAI can do with Fly

LuumenAI connects to Fly with an API token and exposes 45 tools (30 read-only · 9 write · 6 destructive). Reads answer immediately; writes are shown as a plan and require approval by default, configurable per tool by an administrator.

## Key facts

- Authentication: API token
- Tools available: 45 tools (30 read-only · 9 write · 6 destructive)
- Plan: available on all plans
- Category: Source control & CI/CD

## About Fly with LuumenAI

Connect Fly and Luumen can answer questions about your apps without you opening a browser: what a machine is doing, which image tag is current, whether a certificate is valid, what the active token can reach. Changes — health check jobs, WireGuard peers, SSH keys, certificates — are previewed first and go through approval by default. Auth is an API key.

## Example tools

Read-only (30 in total):

- `FLY_CHECK_APP_NAME_AVAILABILITY` — Validate an app name for Fly.io app creation.
- `FLY_CHECK_JOBS` — Execute GraphQL queries against the Fly.io checkJobs endpoint.
- `FLY_CHECK_USER_ONLY_TOKEN` — Check whether the authentication token only allows user access.
- `FLY_FETCH_NODES_BY_IDS` — Fetches a list of node objects from Fly.io given a list of IDs using the GraphQL nodes query.
- `FLY_GET_ADD_ON` — Find a Fly.io add-on by ID, name, or provider.
- `FLY_GET_ADD_ON_PROVIDER` — Query information about a specific Fly.io add-on provider (extension) by name.
- `FLY_GET_APP_DETAILS` — Retrieve detailed information about a specific Fly.io application.
- `FLY_GET_CERTIFICATE` — Retrieve a certificate by its ID from Fly.io.

Write and destructive (15 in total, approval required by default):

- `FLY_ADD_WIRE_GUARD_PEER` — Add a WireGuard peer connection to a Fly.io organization for private network access.
- `FLY_CREATE_CHECK_JOB` — Create a health check job for monitoring application endpoints in Fly.io.
- `FLY_CREATE_CHECK_JOB_RUN` — Triggers a run of an existing health check job on Fly.io.
- `FLY_CREATE_DELEGATED_WIRE_GUARD_TOKEN` — Create a delegated WireGuard token for peer management in a Fly.io organization.
- `FLY_CREATE_THIRD_PARTY_CONFIGURATION` — Create a third-party service configuration for discharging macaroon caveats.
- `FLY_DELETE_DELEGATED_WIRE_GUARD_TOKEN` — Delete a delegated WireGuard token from a Fly.io organization.
- `FLY_DELETE_ORGANIZATION` — Delete a Fly.io organization and all its associated resources using the GraphQL API.
- `FLY_DELETE_REMOTE_BUILDER` — Delete a remote builder configuration for a Fly.io organization.

## Frequently asked questions

### How does LuumenAI connect to Fly?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Fly on its own?

Read actions answer immediately. Anything that writes is shown as a plan and requires approval by default, including the 6 actions classified as destructive. Administrators configure that per tool.

### Is there an audit trail?

Every call to Fly — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/fly/