Docs
⌘K

CLI: Functions and secrets

Deploy, invoke, version, promote and roll back edge functions, read their logs, and manage function secrets with sov.

Updated Oct 16, 2026
sov fn deploy ./functions/order-total --name order-total
sov fn invoke order-total --data '{"cart_id": 42}'
sov fn versions --help

sov fn

Cloud function management

sov fn deploy

Deploy a cloud function (Python or JavaScript) to the Forge engine.

sov fn deploy [OPTIONS] DIRECTORY

Example: sov deploy ./my-function --name greet --project proj-abc123

Arguments and options

DIRECTORYdirectoryoptional
Path to the function directory to deploy
--name / -ntextoptional
Function name
--notetextoptional
Version change note for deployment history
--entrypointtextoptional
Entry file (default: main.py, else index.mjs / index.js)
--handlertextoptionaldefault handler
Exported function to call
--include-depsflagoptional
Bundle node_modules / vendored packages (paid plans)
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.
sov fn deploy ./functions/order-total --name order-total --note "round totals to cents"

sov fn status

Check status of a Forge deployment.

sov fn status [OPTIONS] DEPLOY_ID

Arguments and options

DEPLOY_IDtextrequired
Deployment id returned by sov fn deploy
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn invoke

Invoke a deployed function via Forge sandbox runtime.

sov fn invoke [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name/path (e.g. my-fn)
--deploy-idtextoptional
Invoke a specific deployment id instead of latest
--execution-profiletextoptionaldefault standard
Execution profile: standard or heavy
--asyncflagoptional
Queue async invocation (recommended for heavy functions)
--wait / --no-waitflagoptional
When --async is used, poll until completion
--simulateflagoptional
Run simulation mode and store simulation history
--datatextoptional
Inline JSON payload passed to the function
--data-filefileoptional
Path to JSON payload file
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.
sov fn invoke order-total --data '{"cart_id": 42}'
sov fn invoke report --async --wait --data-file payload.json

sov fn versions

List deployment versions for one function.

sov fn versions [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name/path (e.g. my-fn)
--limitint rangeoptionaldefault 50
--offsetint rangeoptionaldefault 0
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn history

List invocation history for one function.

sov fn history [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name/path (e.g. my-fn)
--modetextoptional
Optional mode filter: invoke or simulate
--limitint rangeoptionaldefault 50
--offsetint rangeoptionaldefault 0
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn functions

List Forge functions with active versions and queue summary.

sov fn functions [OPTIONS]

Arguments and options

--limitint rangeoptionaldefault 100
--offsetint rangeoptionaldefault 0
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn jobs

List durable async jobs for a function.

sov fn jobs [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name/path (e.g. my-fn)
--statustextoptional
Optional status filter
--limitint rangeoptionaldefault 100
--offsetint rangeoptionaldefault 0
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn sim-diff

Show unified diff between two simulation invocations.

sov fn sim-diff [OPTIONS] FUNCTION_NAME LEFT_INVOCATION_ID RIGHT_INVOCATION_ID

Arguments and options

FUNCTION_NAMEtextrequired
Function name/path (e.g. my-fn)
LEFT_INVOCATION_IDtextrequired
Left simulation invocation id
RIGHT_INVOCATION_IDtextrequired
Right simulation invocation id
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn promote

Promote a deployment/version to become active.

sov fn promote [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name/path (e.g. my-fn)
--versionint rangeoptional
Target version to promote
--deploy-idtextoptional
Target deploy id to promote
--reasontextoptional
Promotion reason
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn rollback

Rollback active function deployment to a previous version.

sov fn rollback [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name/path (e.g. my-fn)
--versionint rangeoptional
Optional explicit target version (defaults to previous active)
--reasontextoptional
Rollback reason
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn logs

Fetch recent invocation logs for a function.

sov fn logs [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name
--limitint rangeoptionaldefault 50
--offsetint rangeoptionaldefault 0
--statustextoptional
Filter: SUCCEEDED, FAILED, TIMEOUT
--follow / -fflagoptional
Stream new log entries
--intervalfloat rangeoptionaldefault 2.0
Poll interval when --follow
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.
sov fn logs --help

sov fn serve

Run a function locally with a hot HTTP server (Supabase functions serve).

sov fn serve [OPTIONS] DIRECTORY

Arguments and options

DIRECTORYdirectoryoptional
Function source directory (must contain main.py)
--name / -ntextoptional
Display name
--hosttextoptionaldefault 127.0.0.1
--portint rangeoptionaldefault 8787
--entrypointtextoptionaldefault main.py
--handlertextoptionaldefault handler

sov fn get

Get function metadata.

sov fn get [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn delete

Delete a deployed function.

sov fn delete [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name
--yes / -yflagoptional
Skip confirmation prompt
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn source

Fetch function source code.

sov fn source [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn update

Patch function metadata and/or source.

sov fn update [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name
--sourcetextoptional
Inline source code
--source-filepathoptional
--runtimetextoptional
--entrypointtextoptional
--regiontextoptional
--descriptiontextoptional
--verify-jwt / --no-verify-jwtflagoptional
--env-varstextoptional
JSON object
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn policy-get

Fetch function invoke policy.

sov fn policy-get [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn policy-set

Replace function invoke policy.

sov fn policy-set [OPTIONS] FUNCTION_NAME POLICY_JSON

Arguments and options

FUNCTION_NAMEtextrequired
Function name
POLICY_JSONtextrequired
JSON policy object
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn bindings-get

Fetch function secret bindings.

sov fn bindings-get [OPTIONS] FUNCTION_NAME

Arguments and options

FUNCTION_NAMEtextrequired
Function name
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn bindings-set

Replace function secret bindings.

sov fn bindings-set [OPTIONS] FUNCTION_NAME BINDINGS_JSON

Arguments and options

FUNCTION_NAMEtextrequired
Function name
BINDINGS_JSONtextrequired
JSON array, e.g. [{"name":"API_KEY","value":"..."}]
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn github-repos

List GitHub repositories available for import.

sov fn github-repos [OPTIONS]

Optional PAT: set SOVARIA_GITHUB_TOKEN or authenticate with gh auth login.

Arguments and options

--limitint rangeoptionaldefault 30
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn github-import

Import a function from a GitHub repository path.

sov fn github-import [OPTIONS]

Optional PAT: set SOVARIA_GITHUB_TOKEN or authenticate with gh auth login.

Arguments and options

--nametextrequired
Function name to create/update
--repotextrequired
owner/repo
--pathtextrequired
Path within the repository
--reftextoptionaldefault main
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov fn github-commit

Commit local function source back to GitHub.

sov fn github-commit [OPTIONS]

Optional PAT: set SOVARIA_GITHUB_TOKEN or authenticate with gh auth login.

Arguments and options

--nametextrequired
Local function name
--repotextrequired
owner/repo
--pathtextrequired
Target path in the repository
--messagetextrequired
Commit message
--reftextoptionaldefault main
--committer-nametextoptional
--committer-emailtextoptional
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov deploy

Deploy a cloud function (Python or JavaScript) to the Forge engine.

sov deploy

Deploy a cloud function (Python or JavaScript) to the Forge engine.

sov deploy [OPTIONS] DIRECTORY

Example: sov deploy ./my-function --name greet --project proj-abc123

Arguments and options

DIRECTORYdirectoryoptional
Path to the function directory to deploy
--name / -ntextoptional
Function name
--notetextoptional
Version change note for deployment history
--entrypointtextoptional
Entry file (default: main.py, else index.mjs / index.js)
--handlertextoptionaldefault handler
Exported function to call
--include-depsflagoptional
Bundle node_modules / vendored packages (paid plans)
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov secrets

Function secrets and env bindings

sov secrets list

List secret bindings for a function (masked values).

sov secrets list [OPTIONS] FUNCTION

Arguments and options

FUNCTIONtextrequired
Function name
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov secrets set

Set one secret binding on a function.

sov secrets set [OPTIONS] FUNCTION

Arguments and options

FUNCTIONtextrequired
Function name
--nametextrequired
Secret name
--valuetextrequired
Secret value
--merge / --replaceflagoptional
Merge with existing bindings
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov secrets unset

Remove a secret binding from a function.

sov secrets unset [OPTIONS] FUNCTION

Arguments and options

FUNCTIONtextrequired
Function name
--nametextrequired
Secret name to remove
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

sov secrets import

Import secrets from a .env file or JSON bindings array.

sov secrets import [OPTIONS] FUNCTION FILE

Arguments and options

FUNCTIONtextrequired
Function name
FILEpathrequired
.env or JSON bindings file
  • Also takes --profile, --org, --project and --env to act on another account, organization, project or environment.

Related

CLI referenceConnect your app
Something unclear or missing on this page?Tell us