App Builder CLI Reference
komodo app
Section titled “komodo app”Manage Komodo Apps — list, inspect, update, and delete containerized applications running on the Komodo platform.
uv run komodo app --helpkomodo app list
Section titled “komodo app list”List all apps in your account with their names, IDs, and status.
uv run komodo app list| Flag | Description |
|---|---|
-E, --environment | Target environment |
komodo app get
Section titled “komodo app get”Get detailed information about a specific app, including its devfile, status, URL, and timestamps.
uv run komodo app get <APP_ID>komodo app get-status
Section titled “komodo app get-status”Check the deployment status of an app.
uv run komodo app get-status <APP_ID>Status values: IN_PROGRESS, RUNNING, SUSPENDED, SUSPENDING, FAILED.
komodo app update
Section titled “komodo app update”Update an existing app’s devfile configuration.
uv run komodo app update <APP_ID> --devfile <PATH>komodo app delete
Section titled “komodo app delete”Permanently delete an app. Also delete the .app file from your project
directory afterward to avoid 404 errors on future builds.
uv run komodo app delete <APP_ID>komodo app list-logs
Section titled “komodo app list-logs”List log entries for an app. Returns log metadata and presigned S3 URLs.
uv run komodo app list-logs <APP_ID>komodo app list-latest-logs
Section titled “komodo app list-latest-logs”List only the most recent log entries for an app.
uv run komodo app list-latest-logs <APP_ID>komodo app get-log
Section titled “komodo app get-log”Retrieve a specific log entry by log ID.
uv run komodo app get-log <APP_ID> <LOG_ID>komodo app display-log
Section titled “komodo app display-log”Fetch and display the content of a specific log entry.
uv run komodo app display-log <APP_ID> <LOG_ID>komodo app display-latest-logs
Section titled “komodo app display-latest-logs”Fetch and display the most recent log content for an app. Useful for quick debugging of deployment failures or runtime errors.
uv run komodo app display-latest-logs <APP_ID>komodo app sharing
Section titled “komodo app sharing”Manage who has access to an app by viewing and modifying Platform RBAC custom resource roles (owner, editor, viewer). All subcommands support interactive selection when arguments or flags are omitted.
uv run komodo app sharing --helpkomodo app sharing list
Section titled “komodo app sharing list”Show all users with access to an app and their roles.
uv run komodo app sharing list [APP_ID]Omit APP_ID to interactively pick from your apps.
komodo app sharing roles
Section titled “komodo app sharing roles”Show which roles you can grant on an app (depends on your own role).
uv run komodo app sharing roles [APP_ID]komodo app sharing grant
Section titled “komodo app sharing grant”Grant a role on an app to another user. Supports a fully interactive flow when flags are omitted: pick an app, choose a role, then select a user from account members or enter their ID/email directly.
uv run komodo app sharing grant [--app-id APP_ID] [--role ROLE] [--user USER_ID_OR_EMAIL]| Flag | Description |
|---|---|
-a, --app-id | App UUID (omit to pick interactively) |
-r, --role | Role to grant: owner, editor, or viewer (omit to pick) |
-u, --user | Target user ID (UUID) or email (omit to pick from account members) |
-E, --environment | Target environment |
komodo app sharing revoke
Section titled “komodo app sharing revoke”Revoke a role on an app from a user. When flags are omitted, shows who currently has access and lets you pick.
uv run komodo app sharing revoke [--app-id APP_ID] [--role ROLE] [--user USER_ID_OR_EMAIL]| Flag | Description |
|---|---|
-a, --app-id | App UUID (omit to pick interactively) |
-r, --role | Role to revoke (omit to auto-resolve from current assignment) |
-u, --user | Target user ID or email (omit to pick from users with access) |
-E, --environment | Target environment |
komodo build
Section titled “komodo build”Build and deploy services. Default (no subcommand): uses the remote Build API — discovers services with Dockerfiles, uploads build context, streams logs, then creates or updates the app. Komodo OAuth only; no user AWS credentials needed.
Use komodo build --local when you need a local BuildKit build: buildctl
exports a docker image tarball, which is uploaded via the Build API prebuilt path
(Trivy, ECR, and signing run on the platform). Requires BuildKit and buildctl.
Komodo OAuth only — no AWS_ROLE_ARN or AWS CLI for ECR.
BUILDKIT_HOST: Default docker-container://buildkitd. Set to e.g. tcp://127.0.0.1:1234 when using a TCP BuildKit container. Same variable applies to MCP build_app (build_mode: local), but must be configured on the MCP server process for IDE use — see App Builder — BUILDKIT_HOST.
uv run komodo build --helpTop-level options (when no subcommand):
| Flag | Description |
|---|---|
--local, -L | Local BuildKit image tar + Build API prebuilt upload (OAuth only; no client ECR push) |
--dockerfile, -f | Dockerfile path relative to context for remote builds (default: Dockerfile) |
--cpu | Build API worker CPU limit for remote builds and for local prebuilt uploads (default: 2000m) |
--memory | Build API worker memory limit for remote builds and for local prebuilt uploads (default: 2Gi) |
--verbose, -V | Verbose output |
--architecture, -A | Target arch for local builds: amd64 or arm64 |
-E, --environment | Target environment |
komodo build status
Section titled “komodo build status”Check status of a remote image build by build ID (not app UUID).
uv run komodo build status <BUILD_ID>| Flag | Description |
|---|---|
--poll | Poll every 5 seconds until the build reaches a terminal state |
-E, --environment | Target environment |
komodo build cancel
Section titled “komodo build cancel”Cancel a queued or in-progress remote image build.
uv run komodo build cancel <BUILD_ID>komodo build list
Section titled “komodo build list”List all services with Dockerfiles or devfile files found in the current directory and subdirectories.
uv run komodo build listkomodo build check
Section titled “komodo build check”Check if the BuildKit daemon is accessible (relevant for local builds).
uv run komodo build checkkomodo infra
Section titled “komodo infra”Account infrastructure and networking helpers — mesh, domains, and AWS account info.
uv run komodo infra --helpkomodo infra mesh
Section titled “komodo infra mesh”Create a mesh networking request to connect an AWS resource in your subaccount to your deployed apps. See the App Builder — Mesh Networking guide for details.
uv run komodo infra mesh <RESOURCE_ARN>| Argument | Description |
|---|---|
RESOURCE_ARN | ARN of the AWS resource to mesh (e.g., an RDS database ARN) |
| Flag | Description |
|---|---|
-E, --environment | Target environment |
komodo infra mesh-status
Section titled “komodo infra mesh-status”Check the status of a mesh request.
uv run komodo infra mesh-status <MESH_REQUEST_ID>| Flag | Description |
|---|---|
--poll | Poll every 10 seconds until mesh completes or fails |
-E, --environment | Target environment |
Status values: IN_PROGRESS, COMPLETED, FAILED.
komodo infra get-assigned-domains
Section titled “komodo infra get-assigned-domains”List assigned domains for the account.
uv run komodo infra get-assigned-domainskomodo infra get-aws-account-info
Section titled “komodo infra get-aws-account-info”Print AWS account information for the environment.
uv run komodo infra get-aws-account-infokomodo secrets
Section titled “komodo secrets”Manage secrets across three scopes: user (personal), app (application-specific), and shared (team-wide). Each scope supports the same set of subcommands.
uv run komodo secrets --helpScopes
Section titled “Scopes”| Scope | Command prefix | Description |
|---|---|---|
| User | komodo secrets user | Personal secrets scoped to the authenticated user |
| App | komodo secrets app | Secrets scoped to a specific application |
| Shared | komodo secrets shared | Secrets shared across the account |
Subcommands (available for each scope)
Section titled “Subcommands (available for each scope)”Each scope (user, app, shared) provides the following subcommands:
create
Section titled “create”Create a new secret.
uv run komodo secrets user create <NAME> --data '<JSON>'| Flag | Description |
|---|---|
--data | JSON object with secret key-value pairs |
--data-file | Path to a JSON file (or - for stdin); mutually exclusive with --data |
Retrieve a secret by name.
uv run komodo secrets user get <NAME>| Flag | Description |
|---|---|
--reveal | Show secret values instead of masking them |
List all secrets in the scope.
uv run komodo secrets user listupdate
Section titled “update”Update an existing secret.
uv run komodo secrets user update <NAME> --data '<JSON>'| Flag | Description |
|---|---|
--data | JSON object with updated key-value pairs |
--data-file | Path to a JSON file (or - for stdin) |
--merge | Merge with existing data instead of replacing |
delete
Section titled “delete”Delete a secret.
uv run komodo secrets user delete <NAME>Move a secret to a different scope.
uv run komodo secrets user move <NAME> --to <SCOPE>| Flag | Description |
|---|---|
--to | Destination scope: user, app, or shared |
App-scoped Secrets
Section titled “App-scoped Secrets”App-scoped secrets require an --app-id flag:
uv run komodo secrets app create <NAME> --app-id <APP_ID> --data '<JSON>'uv run komodo secrets app get <NAME> --app-id <APP_ID>uv run komodo secrets app list --app-id <APP_ID>