NewDebug failed jobs and retry from any step.

Platform / CLI & API

Product 03

Preloop CLI & API

Run your existing workflows with your uncommitted changes.

Test your local, uncommitted changes on preloop before you push, for a much faster feedback loop.

Workflow files
Unchanged
Availability
Available today
Surface
CLI, API and dashboard
LOOP04beats
01Changesnapshot
02Verifyreplay
03Fixpause
04Mergepublish
One CLI. Every run, log and retry over one API.

Why it exists

Today you commit, push and wait to find out whether a change works. Running your changes before you commit means you find out sooner, and your history stays clean.

Preloop CLI & API, step by step.

The mechanism, in the order a job meets it.

  1. 01

    Install and log in

    Install `plp` with Homebrew (`brew install preloopdev/tap/plp`) or the install script, then log in once with a device code. The CLI stores the token and talks to the hosted API from there.

  2. 02

    Start a run

    `plp ci run` uploads your working tree, including uncommitted files, as a git bundle and starts the workflow on preloop's hosted runners.

  3. 03

    Watch it

    `plp ci plan` shows the job DAG before you run it. `plp ci status` lists active and recent runs, and `plp ci logs` streams a job's output.

  4. 04

    Fix it

    If a job pauses, attach with `plp ci debug` or connect an editor through `plp ci dap`. Retry from any step.

  5. 05

    Migrate

    `plp ci migrate scan`, `plan`, `apply` and `verify` move a workflow from GitHub-hosted runners to preloop and open the pull request for you.

What you get.

Each capability is part of the product today.

01

Device login, short-lived tokens

Sign in with a device code. Platform access tokens last at most 15 minutes, so a leaked token is a narrow window.

02

One API behind the CLI and the dashboard

Every `plp ci` command calls the same hosted API the dashboard uses. Script anything you can click.

03

Secrets, scoped and bound

Set, get, scope and delete secrets at the run, environment, repository, organization or global tier, bound to a branch, workflow or job. `plp ci secrets` never prints a value back.

04

Orgs, roles and agents

An org holds people under six roles: owner, admin, maintainer, developer, viewer and ci-agent. Agent principals get their own scoped, short-lived tokens.

05

Migrate without hand-editing YAML

`plp ci migrate` scans a repository, plans the move, opens a pull request with the rewritten runner label, and verifies the result.

06

Connect GitHub once

Install the preloop GitHub App for an organization, then check its status or disconnect it from the CLI or the dashboard.

Sample / bash

Examplebash
# start a run; uploads the working tree, including uncommitted changes
plp ci run -f .github/workflows/ci.yml

# see the job DAG without running it
plp ci plan -f .github/workflows/ci.yml --json

# watch it
plp ci status
plp ci logs -f

# a paused job: attach, fix, retry from a step
plp ci debug --from 6

# move a workflow to preloop
plp ci migrate plan

The CLI is a thin client: every command calls the same hosted API the dashboard uses.

Specs.

Install
`brew install preloopdev/tap/plp`, or `curl -fsSL https://preloop.dev/install.sh | sh`.
Auth
`PRELOOP_TOKEN` for automation; a device code for people.
Architecture
A thin client over the hosted API, plus your local `git`. No scheduler or runner ships with the binary.
Where jobs run
Linux microVMs on preloop's managed pool.
Secret values
Piped from stdin, a file, an environment variable, or an interactive prompt. Never printed back.
Output
SARIF alongside the job log, for tools that read it.

Preloop CLI & API questions

Q.01How do I install it?

brew install preloopdev/tap/plp, or curl -fsSL https://preloop.dev/install.sh | sh. Then run plp login.

Q.02How do I log in?

People log in once with a device code. Automation sets PRELOOP_TOKEN instead and skips the interactive step.

Q.03Does any job run on my machine?

No. Every job runs on preloop's hosted microVMs. The CLI only uploads your working tree and streams the result back.

Q.04Can it test uncommitted changes?

plp ci run uploads a git bundle of your working tree, including uncommitted and untracked files, so the hosted run sees exactly what you have, not just what you pushed.

Q.05How do I move a workflow to preloop?

plp ci migrate scan finds what it can move, plan and apply rewrite the runner label and open a pull request, and verify confirms it.

Q.06Can an agent use the CLI safely?

Yes. An agent's token is the intersection of your grants and its own ceiling, capped at 15 minutes, and task grants bind it to one run or job at a time.

Start

Start with one workflow.

We will set it up with you and show you what changes.