---
title: "Automation and integrations"
description: "Connect Alpacon to CI, identity, notifications, and AI tools. Choose an automation identity, prepare scoped access, then run deployments across servers."
---

> Full documentation index: https://docs.alpacax.com/llms.txt

# Automation and integrations

<span id="deployment-overview" />
<span id="integrate-with-alpacon" />

Choose an integration, prepare its identity and access, then test the work it needs to do.

## Prepare automation access

<span id="what-you-can-do" />
<span id="api-based-deployment" />
<span id="tokens" />
<span id="security-considerations" />

For CI/CD or custom scripts that run commands or transfer files, [create an application](/use/iam/applications/) and [issue a service token](/use/iam/applications/service-tokens/). Give it only the scopes and server, command, or file rules the job needs. Store its key in your CI/CD secret store. Use separate tokens for different environments, rotate keys regularly, and disable a token when the job ends. [Token types and lifecycle](/reference/tokens/) compares other credentials, including personal API and server registration tokens.

<span id="multi-server-command-execution" />
<span id="multi-server-commands" />

To run commands across several servers, request a [work session](/use/work-sessions/create/) with the required command capability and use [`alpacon exec`](/reference/cli/exec/). This supports rolling updates, configuration changes, maintenance scripts, and health checks. Check the [work-session features](/reference/work-session-features/) and [server groups](/use/servers/groups/) before targeting a fleet.

Test a command on a staging server first. Review [command history](/use/audit/events/commands/) after execution and plan a rollback for deployment changes.

Use [workspace roles](/use/workspace/settings/roles/) to manage who can prepare deployment access.

## Identity providers

  
    Integrate with your organization's identity provider for centralized authentication.
  

## Team notifications and approvals

  
    Connect the Slack app, choose a notification channel, link members, and review approval requests from Slack.
  

## CI/CD platforms

GitHub Actions is our official integration, with four published actions. Every other CI system drives Alpacon through the CLI and the REST API with scoped service tokens—the guides below show how.

  
    Automate deployments with the official Alpacon actions.
  
  
    Run Alpacon from GitLab CI/CD using the CLI container.
  
  
    Run Alpacon from a Jenkins pipeline using the CLI container.
  

## Automation guides

<span id="integration-guides" />
<span id="common-integration-patterns" />
<span id="deployment-automation" />
<span id="api-based-automation" />

  
    Run scoped commands and transfers from a custom integration.
  
  
    Run playbooks with an application account and service token.
  
  
    Diagnose token, account, access-rule, and sudo failures.
  

## AI agents

  
    Connect Claude, Cursor, VS Code, and other AI assistants through the Alpacon MCP server with scoped, audited access.
  

## Benefits of integration

- **No SSH keys in CI/CD**: Use scoped service tokens instead
- **Audit trail**: Review command history and token activity
- **Command ACLs**: Restrict what automation can execute
- **Repeatable jobs**: Use the same scoped credentials in deployment scripts and CI jobs

## Getting started

1. [Create a service token](/use/iam/applications/service-tokens/) for automation
2. Choose your integration platform above
3. Follow the platform-specific guide
4. Test with simple commands first

## Need help?

<span id="related-documentation" />

- [API reference](/reference/api/) - Complete API documentation
- [CLI reference](/reference/cli/) - All CLI commands
- [Troubleshooting](/use/troubleshooting/) - Common integration issues

Source: https://docs.alpacax.com/integrate/