API reference
One GraphQL endpoint for everything, a few REST endpoints for byte streams and webhooks, and the MCP server for AI agents.
Deplo has one API. The dashboard, the MCP server, your CI and your scripts all speak it.
POST https://deplo.example.com/api/graphql # the API
GET https://deplo.example.com/api/graphql # GraphiQL, in a browserEvery page in this section is generated from the live schema, so every query, mutation and subscription is here, each with who may call it, its arguments, and a working example.
First call
Create a token under Settings -> API tokens, then:
curl https://deplo.example.com/api/graphql \
-H "Authorization: Bearer deplo_xxxxxxxxxxxxxxxxxxxxxxxx" \
-H "Content-Type: application/json" \
-d '{"query":"{ me { username } apps { slug status } }"}'{
"data": {
"me": { "username": "ada" },
"apps": [{ "slug": "shop", "status": "active" }]
}
}Read Authentication for the three credentials and how a request picks its team, then Conventions for what every operation has in common.
GraphQL, by domain
Account
Sign in, sessions, profile, two-factor, passkeys
API tokens
Create, scope, update and revoke a token
Teams
The active team, switching, settings, ownership, MCP
Members and roles
Who is in the team, what each role grants
Users and registration
Instance-admin account operations, registration links
Folders, projects and environments
The containers apps live in, sharing, moving
Apps
Catalogue, creating, running, stopping, deleting
App settings
Source, build, resources, ports, volumes, files
Deployments
History, redeploy, cancel, roll back, the deploy hook
Pull request previews
Settings, previews, preview-only variables
Environment variables
App variables and shared variables
Domains and basic auth
Hostnames, routing, certificates, the password gate
Databases
Managed databases, settings, credentials
Console and logs
Containers, shells, one-off commands
Cron jobs
Scheduled commands and their runs
Backups
Schedules, runs, restores, destinations
Git providers
Git connections and GitHub Apps
Container registries
Credentials for private images
Servers
Enrolling, roles, health, maintenance, certificates
Monitoring
Live and historical metrics
Notifications
Alert channels and browser push
Activity
The audit trail
Docker cleanup
Policy, exclusions, sweeps
Instance settings
Panel address, HTTPS, updates, ownership
Migration and takeover
Importing another panel and taking over its machine
Types
Object types
Everything an operation can return
Input types
Everything an argument can take
Enums
Every enum and its values
Other transports
REST endpoints
Deploy hook, upload, log and console streams, webhooks
MCP
The wire protocol AI agents speak
See also
Did this page help you?