CLI reference

Install the CLI from npm:

npm install -g @marina-cloud/cli

Authentication

Command	Description
`marina setup`	Sign in through your browser.
`marina setup --token mar_…`	Save an existing token for a headless environment.
`marina profile`	Show the active API and credential location.
`marina logout`	Remove the saved credential.

Set MARINA_TOKEN to supply a credential without writing a profile. Set MARINA_API to target a different Marina API origin.

Apps and deployments

Command	Description
`marina deploy [dir]`	Deploy a directory, or the current directory by default.
`marina deploy demo`	Create the bundled Hello Marina demo.
`marina status [--app <slug>]`	Show what is live and the last deploy outcome.
`marina deploys [--app <slug>]`	List recent deployment attempts.
`marina versions [--app <slug>]`	List immutable app versions.
`marina rollback --to <hash>`	Publish an earlier artifact as a new version.
`marina list`	List apps in the active workspace.
`marina open`	Open the linked app.

marina deploy accepts --name <name> when creating an app and --app <slug> to deploy into a specific existing app.

App keys

Command	Description
`marina keys [--app <slug>]`	List the app’s active keys.
`marina keys create --name <name> --scope <scope>`	Create a key. Repeat `--scope` for more scopes. The key is printed once.
`marina keys create … --expires-days <1-365>`	Create a key that expires after that many days.
`marina keys revoke <key-id>`	Revoke a key. It stops working within 30 seconds.

Managing keys requires a workspace admin or the app’s creator. See App keys.

Managed secrets

Command	Description
`marina secrets [--app <slug>]`	List secret names and update times. Values are never shown.
`marina secrets set <name> [--app <slug>]`	Read a value from standard input and store or rotate it.
`marina secrets set <name> --file <path>`	Read the exact secret bytes from a file.
`marina secrets delete <name> [--app <slug>]`	Delete a secret value from the app.

For a shell variable, pass the value without adding a newline:

printf %s "$PAYMENTS_API_KEY" | marina secrets set PAYMENTS_API_KEY --app my-tool

The value becomes available immediately to versions that declare the same name in runtime.secrets; rotating it does not require a deployment. See Managed secrets and outbound HTTPS.

Local development

Command	Description
`marina dev [dir]`	Run the app locally with the production runtime contract.
`marina dev --port 4000`	Change the listen port (default 5990).
`marina dev --schedules`	Also run scheduled jobs on their local timers.
`marina ai models`	List the models `marina.ai` accepts, and whose account pays.

See the local development guide for what each runtime service does on your machine.

Agent skill

Skill installation is always explicit:

marina skills install
marina skills install --agent codex

Use --agent claude or --agent all to choose a different target.

JSON output

Every command accepts --json. Standard output contains one versioned JSON result; progress is written to standard error. Successful results include schema_version: 1 and ok: true. Failures include ok: false and a stable error.code.

Exit code	Meaning
`0`	Success
`1`	Command or deployment failure
`2`	Authentication required
`3`	Deployment refused

Get started

Guides

Platform services

Connections

Reference

Authentication

Apps and deployments

App keys

Managed secrets

Local development

Agent skill

JSON output

​Authentication

​Apps and deployments

​App keys

​Managed secrets

​Local development

​Agent skill

​JSON output

Authentication

Apps and deployments

App keys

Managed secrets

Local development

Agent skill

JSON output