Sanaf AI
Start free
Developer Tools

Fly, worked by an AI employee

Not another app for your team to learn, and not a set of rules for you to build. You hire an AI employee, you give it access to your Fly account, and you ask it for things in Slack or Teams the way you would ask anyone else on the team. There is nothing to map and nothing to maintain.

  • Developer Tools
  • Connects with a key
  • 45 ready-made tools
  • Asked in Slack or Teams
At work

An illustration of how the conversation reads, not a transcript from a client account.

What Fly is

Fly.io transforms containers into micro-VMs that run on hardware in 30+ regions on six continents.

You paste in a key from your own Fly account. It is kept encrypted, and you can withdraw it from inside Fly whenever you like.

How a run works

One message in, the work done in Fly.

  1. 01

    You ask

    You message your AI employee in the chat your team already has open, in one sentence, in your own words.

  2. 02

    It works out the step

    It decides what the job needs in Fly. You do not pick anything from a menu or wire anything together.

  3. 03

    It does the work

    Signed in to your own Fly account, inside the access you granted it, doing the thing you asked for.

  4. 04

    It reports back

    It tells you what it did, in the same thread. If it could not do something, it says so rather than guessing.

45 tools it already has

What it can do in Fly

These are the ready-made tools your AI employee already has in Fly. It is not limited to them, but it never has to be taught these.

  • Add WireGuard PeerTool to add a WireGuard peer connection to a Fly.io organization for private network access. Use when setting up VPN access or private networking between your infrastructure and Fl
  • Check App Name AvailabilityTool to validate an app name for Fly.io app creation. Use when you need to check if a proposed app name is available before attempting to create a new app. Returns availability sta
  • Check JobsExecute GraphQL queries against the Fly.io checkJobs endpoint. Retrieves check jobs with their schedules, URLs, and configuration. Supports pagination via first/last/after/before p
  • Check LocationsRetrieve all available Fly.io health check locations. Returns a comprehensive list of global locations where health checks can be performed, including geographic details and coordi
  • Check User Only TokenCheck whether the authentication token only allows user access. Returns false if the token allows organization access, true if it only allows user access.
  • Create Check Job RunTriggers a run of an existing health check job on Fly.io. Use when you need to manually trigger a health check for monitoring or testing purposes.
  • Create Delegated WireGuard TokenTool to create a delegated WireGuard token for peer management in a Fly.io organization. Use when you need to generate a token for managing WireGuard peers with delegated access.
  • Create Health Check JobTool to create a health check job for monitoring application endpoints in Fly.io. Use when you need to set up automated health monitoring for a URL from multiple geographic locatio
  • Create Third-Party ConfigurationTool to create a third-party service configuration for discharging macaroon caveats. Use when you need to configure external authorization services for Fly.io token validation.
  • Delete Delegated WireGuard TokenTool to delete a delegated WireGuard token from a Fly.io organization. Use when you need to revoke or remove an existing WireGuard token that was previously created. Either token o
  • Delete OrganizationTool to delete a Fly.io organization and all its associated resources using the GraphQL API. Use when you need to permanently remove an organization. This operation is irreversible
  • Delete Remote BuilderTool to delete a remote builder configuration for a Fly.io organization. Use when you need to remove the remote builder setup from an organization.
  • Delete Third Party ConfigurationTool to delete a third-party service configuration from Fly.io. Use when you need to remove an existing third-party service integration or configuration that was previously created
  • Detach Postgres ClusterTool to detach a Postgres cluster from a Fly.io application, revoking access credentials. Use when you need to remove database connectivity from an application.
  • Establish SSH KeyTool to establish an SSH key for a Fly.io organization. Use when setting up SSH access for secure connections to Fly.io infrastructure.
  • Fetch Nodes by IDsFetches a list of node objects from Fly.io given a list of IDs using the GraphQL nodes query. Use when you need to retrieve multiple objects by their IDs in a single request. Suppo
  • Get Add-OnTool to find a Fly.io add-on by ID, name, or provider. Use when you need to retrieve details about a specific add-on. Returns add-on information including status, organization, reg
  • Get Add-On ProviderTool to query information about a specific Fly.io add-on provider (extension) by name. Returns provider details including provisioning settings, terms of service, and configuration
  • Get app detailsTool to retrieve detailed information about a specific Fly.io application. Use when you need to get app details including certificates and configuration.
  • Get CertificateTool to retrieve a certificate by its ID from Fly.io. Use when you need to get details about a specific certificate including hostname, creation date, and configuration status.
  • Get Current Token InfoTool to get information about the current authentication token. Use when you need to retrieve details about the token being used for API authentication, including organizations, ap
  • Get Latest Image DetailsTool to retrieve the latest available tag details for a given image repository from Fly.io's registry. Use when you need to get digest, registry, repository, tag, and version infor
  • Get Latest Image TagTool to retrieve the latest available image tag for a Fly.io Docker repository. Use when you need to find the most recent version of a Fly.io image.
  • Get MachineTool to get a single machine by ID from Fly.io. Use when you need to retrieve details about a specific machine instance.
  • Get Nearest RegionTool to retrieve the nearest Fly.io region to the requesting client based on network location. Use when you need to determine which Fly.io region has the lowest latency from the cu
  • Get Node by IDTool to fetch an object by its globally unique ID using Fly.io's GraphQL node query. Returns a Node interface object with id and typename fields. Use when you need to retrieve any
  • Get OrganizationTool to find a Fly.io organization by slug using the GraphQL API. Use when you need to retrieve organization details including ID, name and slug.
  • Get Personal OrganizationTool to retrieve the user's personal organization details from Fly.io. Use when you need to check credit balance, saved payment methods, certificates, or WireGuard peer information
  • Get PlacementsTool to get placement recommendations for Machines in Fly.io regions. Use when you need to determine optimal regions for deploying machines based on resource requirements, volume c
  • Get Platform InformationTool to retrieve Fly.io platform information including available regions, VM sizes, and flyctl version. Use when you need infrastructure-level details about the Fly.io platform.
  • Get Products and PricingTool to retrieve Fly.io product and price information via GraphQL. Use when you need to fetch product catalog, pricing tiers, or billing information.
  • Get RegionsTool to get the list of available Fly.io regions with optional filtering. Use when you need to discover which regions are available for deploying machines, or to filter regions by
  • Get Viewer InfoTool to retrieve the authenticated user's account information from Fly.io. Use when you need to get the current user's profile details, including avatar, email, creation date, and
  • Issue CertificateTool to issue an SSH certificate for accessing Fly.io infrastructure. Returns an SSH certificate in OpenSSH format. Use when you need to authenticate SSH access to Fly.io machines
  • List Add-On PlansTool to list available add-on service plans from Fly.io. Use when you need to discover pricing, features, and resource limits for Fly.io add-on services. Supports cursor-based pagi
  • List Add-OnsTool to list add-ons associated with an organization in Fly.io. Use when you need to retrieve add-ons for apps in an organization. Supports querying personal organization or specif
  • List AppsTool to list all Fly Apps in an organization. Use when you need to retrieve apps for a specific organization using its slug.
  • List Apps via GraphQLList all Fly.io applications with details including volumes, services, and VMs using GraphQL. Use when you need to retrieve a comprehensive overview of all apps in your Fly.io orga
  • List MachinesTool to list Fly.io machines using GraphQL API with pagination support. Use when you need to retrieve information about deployed machines including their state, region, and creatio
  • List Organization MachinesTool to list all Machines across all apps in a Fly organization. Use when you need to retrieve machines for monitoring, management, or inventory purposes. Supports filtering by reg
  • Remove WireGuard PeerTool to remove a WireGuard peer connection from a Fly.io organization. Use when you need to delete or revoke an existing WireGuard peer from your organization's network.
  • Set Apps V2 DefaultTool to configure whether new apps in an organization use Apps V2 by default on Fly.io. Use when you need to enable or disable Apps V2 as the default for new applications in a spec
  • Update Third-Party ConfigurationTool to update an existing third-party service configuration for discharging macaroon caveats. Use when you need to modify settings of external authorization services for Fly.io to
  • Validate ConfigTool to validate a Fly.io app configuration. Use when you need to check if a fly.toml configuration is valid before deploying or updating an app.
  • Validate WireGuard PeersTool to validate WireGuard peer IP addresses in a Fly.io organization. Use when you need to verify which peer IPs are valid or invalid before establishing VPN connections.
Access, and who is in charge of it

You stay the boss of your Fly account.

Nothing connects until you approve it. You grant access one app at a time, you can take it back the same way, and everything your AI employee does in there is written down where you can see it.

How we handle your data
  • It signs in to your own Fly account. You are not moving anything into ours.
  • You grant access one app at a time, and you can take it back the same way.
  • Everything it does in Fly is written down, with what it did and when.
  • Anything you tell it to check with you first, it checks with you first.
Other apps in the same corner of the business

It works in Fly and the rest of your software in the same job

A real job rarely stays in one place. Reading a message in one app, checking a record in another and writing the result in a third is one request to your AI employee, not three.

See every app

Questions people ask about Fly

Can an AI employee really work inside Fly?
Yes. It signs in to your own Fly account and works in it the way a new hire would, from the chat your team already has open. Nobody installs anything, and nobody learns a new screen.
Do I have to move anything out of Fly?
No. Nothing moves and nothing is replaced. Your records stay in Fly, your team carries on in the same screens they used yesterday, and your AI employee works alongside them in there.
How does it get into my Fly account?
You paste in a key from your own Fly account. It is kept encrypted, and you can withdraw it from inside Fly whenever you like. You approve it before anything connects, and you can take the access back the same way you gave it.
What can it actually do in Fly?
It has 45 ready-made tools in Fly today, among them Add WireGuard Peer, Check App Name Availability and Check Jobs. The full list is on this page. It is not limited to those, but it never has to be taught them.
Can it use Fly and the rest of my software in the same job?
Yes, and that is usually the point. Reading a message in one app, checking a record in Fly and writing the result somewhere else is one request to your AI employee, not three separate ones you stitch together.
Who decides what it is allowed to do in Fly?
You do. You grant access one app at a time and can withdraw it at any time, anything you ask it to check with you first it checks with you first, and everything it does in Fly is written down with what it did and when.