Replace the account's custom OAuth2 redirect host allowlist (exact hostnames or "*.subdomain" wildcards)

Mark/unmark the Account for deletion.

Update Account's Security Email

Generates a confirmation token for CLI auth.

Upload workspace for later processing in other mutations.

Set Infra Assistant build mode enabled state. Requires T&C to be accepted first.

Set Infra Assistant enabled state. Requires T&C to be accepted first.

Set run summarization enabled state. Requires T&C to be accepted first.

Set Spacelift Intelligence enabled state. Enabling implies acceptance of the Spacelift Intelligence Terms of Use and enables all sub-features.

Create an AI integration.

Delete an AI integration.

Update an AI integration.

ChangeLLMVendor changes the selected LLM vendor for the account

Update the authorization schema used by the account

Create an API key.

Delete an API key.

Enable/disable non-root managers for API keys. Settings this to true means that admins of non-root spaces can create an API key up to their current level of permissions. Also, if this is set to true, then the API key creator can delete the API key regardless of their current permissions.

Reset the secret of an API key.

Update an API key.

Exchange an API token for a Spacelift User.

Delete audit trail webhook.

Set audit trail webhook for the Account.

Creates a new billing subscription addons argument can be ignored because it has not implemented yet.

Cancels current subscription

Updates the billing info of an existing subscription

Updates the billing tier of an existing billing subscription

Updates an existing billing subscription

Create a blueprint.

Delete an existing blueprint.

Update an existing blueprint.

Create a blueprint.

Delete an existing blueprint.

Update an existing blueprint.

Attaches the specified AWS integration to a Stack. Note that at least one of either the 'read' or 'write' parameters must be true, and a Stack can have at most one read, and one write attachment. A single integration can be attached for both read and write.

Updates an AWS integration attachment.

Creates an AWS integration.

Deletes the integration with the specified ID.

Detaches an AWS integration from a Stack, using the unique ID of the attachment.

Attach AWS integration to an intent project.

Detach AWS integration from an intent project.

Updates the integration with the specified ID.

Attaches the specified Azure integration to a Stack. Note that at least one of either the 'read' or 'write' parameters must be true, and a Stack can have at most one read, and one write attachment. A single integration can be attached for both read and write. The subscriptionId can be set when attaching an integration to override the default Azure subscription Id configured against the integration.

Updates an Azure integration attachment.

Creates an Azure integration.

Deletes the integration with the specified ID.

Detaches an Azure integration from a Stack, using the unique ID of the attachment.

Updates the integration with the specified ID.

Create a stack AWS integration by setting a role ARN.

Delete an AWS integration by unsetting a role ARN.

Create a stack GCP integration by generating a service account. If the service account already exists, it is not changed.

Delete a stack GCP integration by deleting a service account.

Attach context to a Stack.

Add a context config element. Requires 'Context Update' permission on the context Space.

Delete a context config element. Requires 'Context Update' permission on the context Space.

Create a new context.

Create a new context (v2).

Delete an existing context.

Detach context from a a Stack.

Update an existing context.

Update an existing context (v2). replaceConfigElements allow to specify if we want to also update config elements. When it's not specified or false, input.configAttachments will be ignored and no config elements will be altered. When true, the config elements attached to the context will be replaced with the values included in the request. If an existing element is not included, it will be deleted from the context.

Create a new DriftDetectionIntegration for stack

Delete DriftDetectionIntegration for stack

Update DriftDetectionIntegration for stack

Share a module with another account or another space

Create a new Module.

Delete an existing Module, assuming it has no active versions.

Disable the module, so it cannot create new runs.

Enable the module.

Change Terraform registry from private to public.

Update an existing Module (v1 API, does not support updating source).

Update an existing Module (v2 API).

Set notes on the Version.

Create Version based on optional SHA or branch head.

Delete version. This action cannot be undone.

Create Version test run based on provided local workspace.

Trigger failed Version.

Yank the version (mark it as bad). This action cannot be undone.

Dismisses notifications by grouping key.

Dismisses notifications.

Update Account's Awareness Source

Complete generic form with the data provided in input

Abandon the active user guide

Creates a new certificate for completing a course. Returns an error if a certificate already exists for this user and group.

Updates the display name of an existing certificate. Returns an error if the certificate does not exist.

Complete the active user guide

Move to the next step for the active user guide

Move to the previous step for the active user guide

Restart a user guide from step 0 while preserving completion history

Start a user guide

Delete an existing Plugin.

Install a plugin from a plugin template

Create a new Plugin Template.

Delete an existing Plugin Template.

Update an existing Plugin.

Attach Policy to a Stack.

Create a new Policy.

Create a new Policy (v2 API).

Delete an existing Policy.

Detach Policy from a Stack.

Attach Policy to a Intent Project

Detach Policy from a Intent Project

Simulate policy evaluation.

Simulate policy evaluation. (v2 API).

Update an existing Policy.

Update a Policy (v2 API).

Create a new Role.

Deletes a run state summary

Deletes a run summary

Trigger a proposed Run. By default, this mutation triggers a proposed run for the commit currently tracked by a Stack or, if the Stack is not yet tracking any commit, against the HEAD of the Stack's tracked branch. These defaults can be overridden. In contrary to the generic runTrigger mutation, proposeWithOverrides allows overriding environment variables in the proposed runs to enable more complex testing environment. Bear in mind that these environment variables are NOT supposed to be secrets, therefore are not treated as such.

Cancel a Run that has not yet started.

Comment on the run.

Confirm a Run that's waiting to be applied. If the Run ID is not passed, the Run that's currently blocking the stack will be confirmed.

Discard a Run that's waiting to be applied. If the Run ID is not passed, the Run that's currently blocking the stack will be discarded.

Discard all runs in a stack that are in a discardable state.

Experimental: Mark a run external dependency as completed.

Force-kill a Run that's currently in progress by sending SIGKILL immediately. Should be used after runStop when the process has not terminated within an acceptable time.

Sets the prioritization value of a run. When prioritized, the run will take precedence over other queued runs for the worker pool it is assigned to.

Sets the priority preset of a run. Controls run scheduling priority with named presets.

Promote a proposed Run to a tracked one.

Create proposed run based on provided local workspace.

Stub for the Terraform provider for creating runs. The Terraform provider only needs to be able to trigger a run but will not follow it, so we do not expose anything else than the ID. By default, a tracked run is created, but this can be overridden by setting the proposed argument to true.

Retry a PR Run that has finished.

Add a run review.

Stop a Run that's currently in progress.

Set a run state to `PENDING_PLAN` to force a replan.

Trigger a Run. By default, this mutation triggers a tracked run for the commit currently tracked by a Stack or, if the Stack is not yet tracking any commit, against the HEAD of the Stack's tracked branch. These defaults can be overridden.

Trigger runs for multiple stacks as a single batch with a shared dependency tree. For tracked runs, downstream dependents are resolved across all input stacks together, so a shared dependent only gets a single run. The output contains the runs created for the requested stacks as well as any runs created for their dependents, in no particular order — correlate results to the input via each run's stack rather than by position. A run's full details are only exposed when you have read access to its stack; otherwise only its id is returned.

Summarizes a given run

Summarizes the run state for a given run

Create a new Scan configuration.

Update an existing Scan configuration.

Delete a Scan configuration.

Queue a new run of an existing Scan.

Create a new ScheduledDelete for stack

Delete ScheduledDelete for stack

Update ScheduledDelete for stack

Create a new ScheduledRun for stack

Delete ScheduledRun for stack

Update ScheduledRun for stack

Create a new ScheduledTask for stack

Delete ScheduledTask for stack

Update ScheduledTask for stack

Create an OAuth2 client for SCIM provisioning

Reset the OAuth2 client credentials for SCIM provisioning

End the current session.

Delete a security key.

Invalidate a Session. NOTE: this functionality is not available in the Starter tier.

Invalidate all account sessions except for the session making the request. Returns the deleted sessions.

Delete all security keys for the current user.

Deletes the instance-wide Slack configuration. Only available on Self-Hosted instances. Calling this mutation on a Spacelift SaaS account will result in an error.

Sets the instance-wide Slack App configuration. This is used to connect your Spacelift installation to a Slack App that can be used for the Slack integration. Only available on Self-Hosted instances. Calling this mutation on a Spacelift SaaS account will result in an error.

Get a Slack URL to redirect to. Optionally specify a Slack environment (defaults to COMMERCIAL).

Creates a new space

Deletes space

Updates space

Set the OIDC subject template for the account

Set up OIDC integration.

Delete OIDC integration.

Update OIDC settings to change claim mappings.

Set up SAML integration.

Delete SAML integration.

Update SAML settings to change claim mappings.

Add a stack config element.

Delete a stack config element.

Create a new stack. The third argument (stackObjectID) is optional, and should only be used when creating a Stack with pre-existing state that is handed over to Spacelift for further management.

Create a new stack based on existing Intent Project

Delete an existing stack.

Adds reference output/input

Adds multiple references output/input in a single request.

Creates multiple stack dependencies in a single request.

Deletes reference output/input from stack dependency

Deletes multiple references from stack dependency.

Updates reference output/input

Updates multiple references output/input in a single request.

Create a new stack dependency.

Delete a stack dependency.

Update an existing stack dependency.

Disable the stack, so it cannot create new runs.

Enable the stack.

Lock the stack for exclusive use.

Change the slug of an existing stack. The slug will be generated from the current stack name. WARNING: if you're referring to this stack by ID from Terraform resources then some of those resources will be recreated. Make sure you know exactly what you're doing!

Set the current commit on an existing stack. The current commit is what is used for tasks and - by default - for triggering tracked runs (deployments).

Sync the tracked commit of the stack.

Unlock the stack.

Update an existing stack.

Sets or unsets star on a Stack or Module.

Generate pre-signed state download URL for a stack. Requires external state access to be enabled on the stack.

Generate pre-signed state upload URL.

Create a Task from a command.

Deploy a blueprint

Delete a blueprint deployment

Rollback a blueprint deployment to a previous state from its change history

Upgrade a blueprint deployment to a new version and update deployment metadata

Mark a published blueprint version as deprecated.

Deploy a template

Delete a template deployment. If skipStackDeletion is true, the deployment record is removed and stacks are detached (made standalone) instead of being destroyed.

Rollback a template deployment to a previous state from its change history

Upgrade a template deployment to a new version and update deployment metadata

Mark a published template version as deprecated.

Creates a new GPG key to be used for signing binaries.

Revokes a GPG key to be used for signing binaries.

Updates the description on the GPG key.

Creates a new Terraform provider. Note that the type needs to be unique within the account, and it can then be used as the provider's ID.

Deletes a Terraform Provider

Changes public visibility of the Terraform Provider

Updates an existing Terraform Provider

Create a new Terraform provider version.

Delete a draft Terraform provider version.

Publish an existing Terraform provider version.

Register a platform supported by the version. The result is presigned upload URL that can be used to upload the platform binary. This call is idempotent so registering the same platform multiple times will not create multiple copies, but once a platform is registered, the binary must be uploaded.

This mutation is similar to terraformProviderVersionRegisterPlatform, but it also returns the optional uploadHeaders required for the upload request.

Revoke a published Terraform provider version.

Update an existing Terraform provider version.

Upload documentation for a Terraform provider version.

Unlock all locked Tofu workspaces in a stack.

Unlock a single locked Tofu workspace.

Group user event

Identify user event

Page user event

Create a new saved filter.

Delete a saved filter.

Update a saved filter.

Track user event

Upload a persistent UI config. Consecutive calls will overwrite the previous config. UI config is a JSON blob.

Update limit of runs created by a single VCS event for this account

Creates the Azure DevOps Repo integration.

Deletes the Azure DevOps Repo integration.

Tests the Azure DevOps Repo integration.

Updates the Azure DevOps Repo integration with new properties.

Creates the Bitbucket Cloud integration.

Creates the Bitbucket Cloud integration.

Deletes the Bitbucket Cloud integration.

Regenerates the webhook secret for Bitbucket Cloud integration.

Tests the Bitbucket Cloud integration.

Updates the Bitbucket Cloud integration with new properties.

Updates the Bitbucket Cloud integration with new properties.

Creates the Bitbucket Datacenter integration.

Deletes the Bitbucket Datacenter integration.

Regenerates the webhook secret for Bitbucket Datacenter integration.

Tests the Bitbucket Datacenter integration.

Updates the Bitbucket Datacenter integration with new properties.

Create a GitHub integration using an app created from a manifest.

Create data for the GitHub app creation form - internal.

Creates the GitHub Enterprise integration

Deletes the GitHub Enterprise integration

Regenerates the webhook secret for GitHub Enterprise integration.

Tests the GitHub Enterprise integration

Updates the GitHub Enterprise integration

Updates the build-in GitHub integration

Creates the GitLab integration.

Deletes the GitLab integration.

Regenerates the webhook secret for GitLab integration.

Tests the GitLab integration.

Updates the GitLab integration with a new access token and (optionally) API host or User Facing Host.

Get a GitHub URL to redirect to.

Exchange code and temporary token for a GitHub token.

Exchange GitHub token for a Spacelift User.

Create a new Repo

Delete a Repo (only if no stacks attached)

Update an existing Repo

Create a revision (commit files) in a Repo

Create a new VCSAgentPool.

Delete an existing VCSAgentPool.

Recreate the credentials necessary to connect VCSAgentPool's agents to the gateways.

Update an existing VCSAgentPool.

Migrate stack vendor configuration. Supports bidirectional migration between Terraform stacks with 'terragrunt' label and native Terragrunt.

Migrate stack vendor configuration for all stacks that need it. The operation has a time limit and may not migrate all stacks in a single call.

Create a new NamedWebhooksIntegration for a space

Delete a NamedWebhooksIntegration from a space

Remove secret headers for a named webhook

Set secret headers for a named webhook to use when sending requests

Update a NamedWebhooksIntegration for a space

Create a new WebhooksIntegration for stack

Delete WebhooksIntegration for stack

Update WebhooksIntegration for stack

Update Account's default public worker pool runner image

Toggles draining on the worker.

Create a new WorkerPool.

Cycles the workerpool

Delete an existing WorkerPool.

Recreate the credentials necessary to connect WorkerPool's workers to the control plane.

Update an existing WorkerPool.