⌨️ CLI reference
One static binary. Everything below also works in the portal and the API — no CLI-only features, no portal-only features.
install
Quick install (Linux / macOS):
curl -fsSL https://bootload.io/v1/cli/install.sh | shIt detects your OS/arch, verifies the SHA-256, installs to /usr/local/bin (or ~/.local/bin), and points the CLI at the bootload portal. Then run bootload version.
Direct download — verify against the checksums (current version: /v1/cli/version):
| Linux | x86-64 | /v1/cli/linux/amd64 |
| Linux | ARM64 | /v1/cli/linux/arm64 |
| macOS | Apple Silicon | /v1/cli/darwin/arm64 |
| macOS | Intel | /v1/cli/darwin/amd64 |
| Windows | x86-64 | /v1/cli/windows/amd64 |
| Windows | ARM64 | /v1/cli/windows/arm64 |
From source (Go ≥ 1.26):
go install github.com/faasile-stein/bootload/cli-tools/cmd/bootload@latestaccount
| bootload signup --email <e> | create an account |
| bootload login --email <e> | log in (token stored locally) |
| bootload whoami | current identity + API target |
| bootload profile [set] | your billing & domain-registrant identity (name, address, VAT) |
| bootload password-change | change your password |
account security
| bootload 2fa enable | status | disable | two-factor auth (TOTP), with one-time backup codes |
| bootload 2fa backup-codes | regenerate your one-time backup codes |
| bootload token create <name> --scope <s> | mint a scoped API key (secret shown once) |
| bootload token list | revoke <id> | manage API keys (secrets are never shown) |
org, project & team
| bootload org create <name> | create an organization |
| bootload project create <name> [--description <d>] | project + private network + wallet (1st free, +€2/mo each extra) |
| bootload org list / project list | what you have (default marked *) |
| bootload org invite <email> --role <role> | invite a teammate (owner|admin|developer|billing|viewer) |
| bootload org members | list members and their roles |
| bootload org member set-role <email> <role> | remove <email> | change a role, or remove a member |
wallet & billing
| bootload wallet balance | balance + runway estimate + warnings |
| bootload wallet topup --amount 50 | insert coins |
| bootload wallet auto-topup --threshold 5 --amount 20 | --off | arm/disable off-session auto top-up (min €10) |
| bootload usage [--csv] | the ledger: every debit and credit (CSV statement export) |
| bootload budget show | set --amount 200 | monthly spend cap (0 clears it) |
| bootload billing | cost per service, broken down by component |
| bootload pricing | current rates for every resource |
ship it
| bootload deploy --image <ref> [--port 3000:http] [--domain d | --publish] [--tcp port --ip addr] [--volume v:/path] [--vcpu n] [--memory mb] [--name n] [--cmd ...] | deploy a service |
| bootload status [service] | replica states, routes, TLS, deploy history |
| bootload logs <service> [-f] [--grep q] | guest stdout, follow, search |
| bootload metrics <service> | CPU / memory / network, live |
| bootload restart <service> [--image ref] | rollout (optionally roll the image) |
| bootload scale <service> --replicas n | 0 = drop anchor (stop paying) |
| bootload scale <service> --min n --max n --target-cpu 70 | horizontal autoscaling on CPU |
| bootload idle-harbor <service> on|off [--idle-after s] | scale to zero when idle, wake on the next request |
| bootload deployments <service> / rollback <service> | history + roll back to a previous image |
| bootload destroy <service> | delete a service and its routes |
debug a running service
| bootload shell <service> | open an interactive shell in a running replica |
| bootload exec <service> -- <command...> | run a one-off command in a replica |
state
| bootload volume create <name> --size 5 | encrypted persistent volume (GB) |
| bootload volume list | detach | delete | manage volumes |
| bootload volume resize <name> --size <gb> | grow a volume (applies on next attach) |
| bootload backup create <volume> | encrypted snapshot |
| bootload backup verify | restore | export | import | the no-lock-in suite |
| bootload backup restore-service <service-backup-id> | rebuild a whole service from a backup |
networking: domains, IPs & mail
| bootload domain add <d> | BYO domain (prints verification record) |
| bootload domain search | buy | renew | transfer | autorenew | registered domains |
| bootload domain info | lock | unlock | ns | dns | auth-code | manage a domain (status, transfer lock, nameservers, DNS, EPP code) |
| bootload ip allocate | list | release <ip> | dedicated public IPs for raw TCP (€3/mo) |
| bootload smtp create <name> --domain <d> | SMTP credentials (password shown once) |
| bootload webhook add | list | delete | deliveries | event webhooks + delivery log |
secrets & registries
| bootload secret set NAME [--service svc] | write-only; project or service scope |
| bootload secret list / secret delete NAME | names only — values never readable |
| bootload registry add <name> --url <host> --username <u> --token <t> | private registry pull credentials |
your images (hosted registry)
| bootload image login | docker login to the bootload registry (mints a scoped push token) |
| bootload image push <local-image> [--as name:tag] | push a local image into your org namespace, then deploy it |
| bootload image list | list images you've pushed |
| bootload image delete <name:tag> | delete an image (refused while a service deploys it); stops its storage billing |
reseller (partner)
| bootload partner clients | list your client organizations |
| bootload partner add-client --name <n> --owner-email <e> | onboard a client (invites its owner) |
| bootload partner suspend <client> | usage <client> | suspend a client, or view its usage by resource |
| bootload partner settings [set --margin <%> --brand <b> --hostname <h> --mail-from <m>] | your margin + white-label settings |
support & more
| bootload ticket create --subject <s> --message <m> | open a support ticket |
| bootload ticket list | show <id> | reply <id> | escalate <id> | close <id> | track and reply |
| bootload kb search [query] | kb show <slug> | search and read help articles |
| bootload referral | your referral link and earnings (5% of referred spend) |
| bootload health | platform / deployment health check |
CI/CD & automation
Every command is non-interactive once BOOTLOAD_TOKEN is set — mint a scoped key with bootload token create and store it as a CI secret. Deploy the service once, then roll a fresh image on every push:
bootload restart web --project <project> --image <registry>/<org>/web:$TAGThe roll is health-gated — the old version keeps serving until the new image passes, and bootload rollback web reverts a bad one. Full guide with GitHub Actions and GitLab CI examples: CI/CD pipelines.
Building with an AI agent? Install the tested skills so it can deploy and wire up your pipeline for you: ci-cd-on-bootload and deploy-on-bootload.