Configuration

The CLI keeps configuration deliberately small: one JSON file holding your token, plus a handful of environment variables for CI and non-production instances.

The config file#

Everything the CLI persists lives in a single file at ~/.config/deplo/config.json, written with file mode 0600 (readable and writable by your user only):

~/.config/deplo/config.json

{
  "token": "dpl_9f2c4e…",
  "apiUrl": "https://www.deplo.in/api/v1"
}

token — your deplo CLI token, written by deplo login and deleted by deplo logout.
apiUrl — optional API base override. Rarely set by hand; most people use DEPLO_API_URL instead (see below).

What is deliberately not stored

Provider credentials. Your Vercel OAuth token and Render API key never touch this machine — they are validated and stored AES-256-GCM encrypted on the platform when you run deplo connect. The config file holds exactly one deplo token, nothing else.

Environment variables#

Variable	Meaning	Default	When to use
DEPLO_TOKEN	Auth token; overrides the config file.	—	CI pipelines and ephemeral machines — nothing is written to disk. See CI Usage.
DEPLO_API_URL	Base URL for the deplo REST API.	https://www.deplo.in/api/v1	Pointing the CLI at a local or staging deplo instance.
DEPLO_WEB_URL	Web origin hosting the `/cli-auth` page used by `deplo login`.	https://www.deplo.in	Only together with `DEPLO_API_URL` against a non-production instance.
NO_COLOR	Disables all colored output.	—	Plain-text logs; color is also dropped automatically when output is not a TTY.

Precedence#

Environment variables always beat the config file; the config file beats the built-in default:

Token: DEPLO_TOKEN → token in config.json.
API base: DEPLO_API_URL → apiUrl in config.json → https://www.deplo.in/api/v1.
Web origin: DEPLO_WEB_URL → https://www.deplo.in (not stored in the config file).

Pointing at a local or staging instance#

Running the deplo platform locally (see Project Structure)? Point the CLI at it for one shell session:

local instance

export DEPLO_API_URL=http://localhost:3000/api/v1
export DEPLO_WEB_URL=http://localhost:3000
deplo login
deplo whoami

A trailing slash on either URL is stripped automatically. Remember that the token minted by a local instance only works against that instance — unset the variables (or open a new shell) to go back to production.