Fly MCP: run Fly.io apps and Machines from your AI app

How to connect Fly.io to Claude, ChatGPT or Cursor

1. 1Click Connect Fly free and sign in to Fly.
2. 2Reading apps, Machines and regions is low risk. Tools that change secrets, add WireGuard peers or create tokens are another matter: switch them off unless an AI app really needs them.
3. 3Add ContextGate to your AI app as a connector or MCP server. The steps for each app are on the Works with page.
4. 4Ask Cursor which Machines your app runs and in which regions, then open Activity to see the calls.

Fly.io work you can do from Claude or Cursor

• List your apps and Machines, with each Machine's state, region and creation time.
• Check available regions and VM sizes, and get placement recommendations before you deploy Machines.
• Manage volumes, secrets and Managed Postgres from a chat.
• Set up a health check job for a URL and trigger a run when you want one.

Infrastructure changes on your terms

• Switch off the secret, WireGuard and token tools; your AI app keeps the read-only views.
• Policies check each call and can block secrets, so a database password doesn't go out in a request.
• Activity keeps a record of every change your AI apps made to your Fly.io organization.

Commands your AI app runs in its own terminal, such as flyctl, don't go through ContextGate and aren't recorded.

What you get with Fly and ContextGate

• Your AI apps can use FlyClaude, Cursor, ChatGPT and other AI apps reach Fly through the one ContextGate connection you add to them.
• You choose which tools they can useSwitch off any Fly tool you don't want used. It's hidden from your AI apps and refused if called.
• Every call is checked and recordedYour policies check each call (for example, personal data is hidden and secrets are blocked), and Activity keeps a record of it.

ContextGate sees only the tool calls that go through it, not your AI app's built-in tools or your chats.

Fly tools

Examples of what your AI apps can do in Fly. You'll see the exact list of tools after you connect it.

• Get app detailsTool to retrieve detailed information about a specific Fly.io application. Use when you need to get app details including certificates and configuration.
• Get Current Token InfoTool to get information about the current authentication token. Use when you need to retrieve details about the token being used for API authentication, including organizations, apps, and whether the
• Get MachineTool to get a single machine by ID from Fly.io. Use when you need to retrieve details about a specific machine instance.
• Get OrganizationTool to find a Fly.io organization by slug using the GraphQL API. Use when you need to retrieve organization details including ID, name and slug.
• Get Personal OrganizationTool to retrieve the user's personal organization details from Fly.io. Use when you need to check credit balance, saved payment methods, certificates, or WireGuard peer information.
• Get PlacementsTool to get placement recommendations for Machines in Fly.io regions. Use when you need to determine optimal regions for deploying machines based on resource requirements, volume constraints, and orga
• Get Platform InformationTool to retrieve Fly.io platform information including available regions, VM sizes, and flyctl version. Use when you need infrastructure-level details about the Fly.io platform.
• Get RegionsTool to get the list of available Fly.io regions with optional filtering. Use when you need to discover which regions are available for deploying machines, or to filter regions by specific resource re
• Get Viewer InfoTool to retrieve the authenticated user's account information from Fly.io. Use when you need to get the current user's profile details, including avatar, email, creation date, and feature flags.
• List AppsTool to list all Fly Apps in an organization. Use when you need to retrieve apps for a specific organization using its slug.
• List Apps via GraphQLList all Fly.io applications with details including volumes, services, and VMs using GraphQL. Use when you need to retrieve a comprehensive overview of all apps in your Fly.io organization.
• List MachinesTool to list Fly.io machines using GraphQL API with pagination support. Use when you need to retrieve information about deployed machines including their state, region, and creation time.
• List Organization MachinesTool to list all Machines across all apps in a Fly organization. Use when you need to retrieve machines for monitoring, management, or inventory purposes. Supports filtering by region, state, and time
• Add WireGuard PeerTool to add a WireGuard peer connection to a Fly.io organization for private network access. Use when setting up VPN access or private networking between your infrastructure and Fly.io.
• Check App Name AvailabilityTool to validate an app name for Fly.io app creation. Use when you need to check if a proposed app name is available before attempting to create a new app. Returns availability status via GraphQL quer
• Check JobsExecute GraphQL queries against the Fly.io checkJobs endpoint. Retrieves check jobs with their schedules, URLs, and configuration. Supports pagination via first/last/after/before parameters. Returns b
• Check User Only TokenCheck whether the authentication token only allows user access. Returns false if the token allows organization access, true if it only allows user access.
• Create Health Check JobTool to create a health check job for monitoring application endpoints in Fly.io. Use when you need to set up automated health monitoring for a URL from multiple geographic locations.
• Create Check Job RunTriggers a run of an existing health check job on Fly.io. Use when you need to manually trigger a health check for monitoring or testing purposes.
• Create Delegated WireGuard TokenTool to create a delegated WireGuard token for peer management in a Fly.io organization. Use when you need to generate a token for managing WireGuard peers with delegated access.