Every feature, in one place
nebulactl CLI
Environments, plans, applies, and compliance from your terminal.
Everything the web app can do, nebulactl can do from your terminal or CI pipeline: environments, plans, applies, drift, policy evaluation, and provider or plugin management.
- env, plan, apply, drift, runs, and readiness commands
- policies evaluate runs policy gates against a plan file in CI
- provider and plugin commands for signing, packaging, and certifying extensions
How it works
nebulactl is a thin REST client — the same one used by NebulaStack's MCP server — so anything you can do through the CLI reflects the actual API. Provider and plugin marketplace commands sign manifests with ed25519 and verify them against a trust anchor before publishing.
Because it shares its API client with NebulaStack's MCP server, a script written against the CLI's exit codes and JSON output modes behaves the same way an AI agent calling the same endpoints would.
$ nebulactl env create --account-id acc_123 --name prod --type Production --region eu-west-3$ nebulactl plan --environment-id env_456 --format terraform$ nebulactl policies evaluate --file plan.json --gateway$ nebulactl apply --environment-id env_456$ nebulactl drift list --environment-id env_456Real output after nebulactl plan
Plan: 4 to add, 0 to change, 0 to destroy.
+ aws_instance.web
+ aws_security_group.web_sg
Policy gate: PASSED (0 violations)