Skip to content

Hop3 CLI Reference

Version: 0.4.0 Last Updated: 2026-02-13

This document provides a complete reference for all Hop3 CLI commands.


Table of Contents


Getting Started

Installation

# Install hop3-cli
pip install hop3-cli

# Or using uv
uv pip install hop3-cli

Configuration

Set your API endpoint and authenticate:

# Set API endpoint
export HOP3_API_URL="https://your-hop3-server.com"
# or
export HOP3_API_URL="ssh://user@your-hop3-server.com"

# Login
hop3 auth:login <username> <password>

# Save token (automatically stored in ~/.hop3/token)

Basic Usage

# List all applications
hop3 apps

# Deploy an application
hop3 deploy myapp

# View application status
hop3 app:status myapp

# View logs
hop3 app:logs myapp

Global Flags

All commands support these global flags:

Output Formatting

  • --json - Output results in JSON format (machine-readable)
  • --quiet - Suppress non-essential output (minimal output)

Interaction

  • -y, --yes - Skip confirmation prompts (auto-confirm destructive operations)

Context Selection

  • --context <name> - Use a specific server context for this command only

Verbosity

Verbosity controls how much output is displayed. The verbosity level is passed to the server and affects all command output.

Level Value Flags Description
Quiet 0 -q, --quiet Minimal output (errors only)
Normal 1 (default) Standard output
Verbose 2 -v, --verbose Detailed output (build logs, command details)
Debug 3 -vv, --debug Maximum verbosity (all internal operations)

Flag stacking: You can use multiple -v flags for increased verbosity: - -v = verbose (level 2) - -vv = debug (level 3) - -vvv = debug (capped at level 3)

Environment variable: Set HOP3_VERBOSITY to control default verbosity:

export HOP3_VERBOSITY=2  # Default to verbose mode

Explicit flags override the environment variable.

Examples

# Get JSON output
hop3 apps --json

# Deploy without confirmation
hop3 deploy myapp -y

# Quiet mode (minimal output)
hop3 backup:create myapp --quiet

# Verbose deployment (see Docker build output)
hop3 -v deploy myapp

# Debug mode (maximum verbosity)
hop3 -vv deploy myapp
# or
hop3 --debug deploy myapp

# Combine flags
hop3 app:destroy oldapp --yes --quiet

# Set default verbosity via environment
HOP3_VERBOSITY=0 hop3 deploy myapp  # Quiet mode

Context Management

Contexts allow you to manage multiple Hop3 servers (e.g., production, staging, development) safely. Similar to kubectl contexts, you can switch between servers without accidentally running commands against the wrong environment.

Why Use Contexts?

  • Safety: Prevent accidental production deployments from your development terminal
  • Convenience: Quickly switch between servers without changing environment variables
  • Protection: Mark production contexts as "protected" for extra confirmation on destructive operations

Context Priority

When determining which server to use, the CLI checks these sources in order:

Priority Source Scope
1 (highest) --context flag Single command
2 HOP3_CONTEXT environment variable Current shell
3 .hop3-context file Current directory
4 (lowest) Global config file All terminals

hop3 context add

Add a new server context.

Usage:

hop3 context add <name> --server <url> [options]

Arguments: - name - Context name (e.g., "production", "staging", "dev") - --server <url> - Server URL (required)

Options: - --token <token> - API authentication token - --protected - Mark as protected (requires extra confirmation for destructive operations) - --ssh-user <user> - SSH username (default: root) - --ssh-port <port> - SSH port (default: 22)

Examples:

# Add a development context
hop3 context add dev --server ssh://root@dev.example.com

# Add a protected production context
hop3 context add production --server ssh://root@prod.example.com --protected

# Add with token
hop3 context add staging --server https://staging.example.com --token eyJ...

Notes: - The first context added automatically becomes the current context - Protected contexts require typing context/resource instead of just resource for destructive operations


hop3 context list

List all configured contexts.

Usage:

hop3 context list

Example Output:

Configured contexts:

    production [protected]
      Server: ssh://root@prod.example.com
  * staging
      Server: ssh://root@staging.example.com
    dev
      Server: ssh://root@dev.example.com

Current context: staging

Notes: - * indicates the current context - [protected] indicates contexts that require extra confirmation


hop3 context current

Show the current context and where it's configured.

Usage:

hop3 context current

Example Output:

Current context: production
  Source: HOP3_CONTEXT environment variable
  Server: ssh://root@prod.example.com
  Protected: yes (requires confirmation for destructive operations)

Possible sources: - --context flag - Set via command line - HOP3_CONTEXT environment variable - Set in current shell - local file (/path/to/.hop3-context) - Set for current directory - global config - Set as global default


hop3 context use

Switch to a different context. Safe by default - does not modify global config.

Usage:

hop3 context use [--local | --global] <name>

Arguments: - name - Context name to switch to

Options: - (default) - Print export command for this shell only (safest) - --local - Write to .hop3-context file in current directory - --global - Set as global default (affects all terminals - use with caution)

Examples:

# Print export command (recommended - only affects current shell after you run it)
hop3 context use production
# Output:
# To use context 'production' in this shell, run:
#   export HOP3_CONTEXT=production

# Save to local .hop3-context file (per-project)
hop3 context use staging --local

# Set as global default (dangerous - affects ALL terminals)
hop3 context use production --global

Best Practice:

For production servers, use the environment variable approach:

# In your .bashrc or .zshrc for production work:
alias hop3-prod='HOP3_CONTEXT=production hop3'

# Or set for current terminal session:
export HOP3_CONTEXT=production


hop3 context remove

Remove a context.

Usage:

hop3 context remove <name>

Example:

hop3 context remove old-staging

Notes: - If you remove the current context, another context becomes current (if any exist) - Does not affect the actual server, only removes the local configuration


Using Contexts

Per-Command Context

Use --context flag for one-off commands:

# Deploy to production without changing your current context
hop3 --context production deploy myapp

# Check staging logs while working on dev
hop3 --context staging app:logs myapp

Per-Shell Context

Set environment variable for your terminal session:

# This terminal is now "production mode"
export HOP3_CONTEXT=production

# All commands use production
hop3 apps
hop3 app:status myapp

Per-Project Context

Create .hop3-context file in your project directory:

cd my-staging-project/
hop3 context use staging --local
# Creates .hop3-context containing "staging"

# Now any hop3 command in this directory uses staging
hop3 deploy myapp

Tip: Add .hop3-context to your .gitignore if you don't want to commit it.


Protected Contexts

Protected contexts provide an extra safety layer for production environments.

Setting up a protected context:

hop3 context add production --server ssh://root@prod.example.com --protected

What changes with protected contexts:

  1. Extra confirmation prompt before any destructive operation
  2. Stricter type-to-confirm - Must type context/resource instead of just resource

Example:

$ hop3 --context production app:destroy myapp

  WARNING: You are operating on protected context 'production'
  This context is marked as protected to prevent accidental changes.

Are you sure you want to continue with this destructive action? [y/N]: y

WARNING: This will permanently destroy the app 'myapp'.
Type 'production/myapp' to confirm (context/app): production/myapp
 App 'myapp' destroyed.


Environment Variables

Variable Description
HOP3_CONTEXT Override the current context for this shell

Example .bashrc setup:

# Production alias with explicit context
alias hop3-prod='HOP3_CONTEXT=production hop3'
alias hop3-staging='HOP3_CONTEXT=staging hop3'

# Or set default for specific terminal profiles
# In your "Production Terminal" profile:
export HOP3_CONTEXT=production


Configuration File

Contexts are stored in ~/.config/hop3-cli/config.toml:

current_context = "staging"

[contexts.staging]
api_url = "ssh://root@staging.example.com"
api_token = "eyJ..."
protected = false
ssh_user = "root"
ssh_port = 22

[contexts.production]
api_url = "ssh://root@prod.example.com"
api_token = "eyJ..."
protected = true
ssh_user = "root"
ssh_port = 22

Authentication Commands

hop3 auth:register

Register a new user account.

Usage:

hop3 auth:register <username> <email> <password>

Arguments: - username - Desired username (alphanumeric, underscores, hyphens) - email - Valid email address - password - Password (minimum 8 characters recommended)

Example:

hop3 auth:register alice alice@example.com mypassword123

Notes: - First registered user automatically becomes admin - Passwords are hashed with bcrypt (work factor 12) - Email must be unique


hop3 auth:login

Authenticate and receive an API token.

Usage:

hop3 auth:login <username> <password>

Arguments: - username - Your username - password - Your password

Example:

hop3 auth:login alice mypassword123

Output:

Login successful!
Token: eyJ0eXAiOiJKV1QiLCJhbGc...
Token saved to ~/.hop3/token

Notes: - Token stored in ~/.hop3/token by default - Token valid for 30 days by default - Set HOP3_API_TOKEN environment variable to override


hop3 auth:whoami

Display current authenticated user information.

Usage:

hop3 auth:whoami

Example Output:

Username: alice
Email: alice@example.com
Roles: admin, user
Active: Yes


hop3 auth:logout

Logout and invalidate current token.

Usage:

hop3 auth:logout

Notes: - Removes token from ~/.hop3/token - Token remains valid until expiration unless server-side revocation implemented


Application Management

hop3 apps

List all applications.

Usage:

hop3 apps [--json]

Example Output:

┌─────────────────────────────────────────────────────────────┐
│ Applications                                                 │
├────────────┬────────────┬──────────────────────┬────────────┤
│ Name       │ Status     │ URL                  │ Deployed   │
├────────────┼────────────┼──────────────────────┼────────────┤
│ myapp      │ RUNNING    │ https://myapp.com    │ 2 days ago │
│ testapp    │ STOPPED    │ https://test.app.com │ 1 week ago │
└────────────┴────────────┴──────────────────────┴────────────┘

JSON Output:

{
  "apps": [
    {
      "name": "myapp",
      "status": "RUNNING",
      "url": "https://myapp.com",
      "deployed_at": "2025-11-10T14:30:00Z"
    }
  ]
}


hop3 app:launch

Create and configure a new app from a Git repository.

Usage:

hop3 app:launch <repo_url> <app_name>

Arguments: - repo_url - Git repository URL (HTTPS or SSH) - app_name - Name for the application (alphanumeric, hyphens, underscores)

Example:

hop3 app:launch https://github.com/user/myapp.git myapp

Notes: - Clones repository to server - Does not deploy automatically (use hop3 deploy after launch) - Repository must be accessible from server


hop3 deploy

Deploy an application from uploaded source or configured repository.

Usage:

hop3 deploy <app_name> [options] [directory]

Arguments: - app_name - Name of application to deploy - directory - Source directory (default: current directory)

Options: - --env KEY=VALUE or -e KEY=VALUE - Set environment variable (can be repeated) - --no-stream - Disable real-time log streaming (use batch output) - --stream - Enable real-time log streaming (default)

Examples:

# Deploy from current directory
cd myapp/
hop3 deploy myapp

# Deploy with environment variables
hop3 deploy myapp --env DEBUG=true --env LOG_LEVEL=info

# Deploy from specific directory
hop3 deploy myapp ./src

# Disable streaming (batch output at end)
hop3 deploy myapp --no-stream

Real-time Log Streaming:

By default, hop3 deploy streams deployment logs in real-time via Server-Sent Events (SSE). You'll see build output as it happens:

> Starting deployment for app 'myapp'
-> Using builder: 'LocalBuilder'
--> Creating virtualenv...
--> Installing from requirements.txt
    Collecting Flask==3.0.0
    Successfully installed Flask-3.0.0
-> Build successful
-> Using deployment strategy: 'uwsgi'
> Waiting for app 'myapp' to start (timeout: 600s)...
> App 'myapp' is now running.

✓ Deployment completed successfully in 45.2s

Use --no-stream to fall back to batch output (all logs shown at end).

Process: 1. Uploads source code as tarball 2. Extracts on server 3. Detects language/framework (Python, Node.js, Ruby, Go, Static) 4. Builds application (installs dependencies, compiles assets) 5. Configures reverse proxy (nginx, Caddy, or Traefik) 6. Starts application processes

Startup Timeout:

Apps must start within a configurable timeout (default: 10 minutes). Configure per-app in hop3.toml:

[run]
start-timeout = 900  # 15 minutes

Or set server-wide default via APP_START_TIMEOUT environment variable.

Notes: - Requires Procfile or hop3.toml for process configuration - Automatically detects buildpack based on files present - Use -v or -vv for more verbose output (see Global Flags) - Build logs are also saved and can be retrieved with app:build-logs - Streaming requires direct HTTP connection (SSH tunnel falls back to batch mode) - See Deployment Guide for details


hop3 app:status

Show detailed status of an application.

Usage:

hop3 app:status <app_name>

Example Output:

Application: myapp
Status: RUNNING
Hostname: myapp.example.com
Port: 8000

Processes:
  web: 2 running
  worker: 1 running

Memory Usage: 245 MB
Uptime: 3 days 14 hours


hop3 app:logs

Show application logs.

Usage:

hop3 app:logs <app_name> [--lines N] [--follow]

Arguments: - app_name - Name of application

Options: - --lines N - Number of lines to show (default: 100) - --follow or -f - Follow log output (real-time)

Example:

# Show last 100 lines
hop3 app:logs myapp

# Show last 500 lines
hop3 app:logs myapp --lines 500

# Follow logs in real-time
hop3 app:logs myapp --follow


hop3 app:build-logs

Show build logs for an application (Docker build output).

Usage:

hop3 app:build-logs <app_name>

Arguments: - app_name - Name of application

Example:

# Show build logs for myapp
hop3 app:build-logs myapp

Example Output:

=== Docker Build Log ===
Timestamp: 2025-12-09 14:30:22
App: myapp
Status: SUCCESS
Duration: 45.3s

=== STDOUT ===
#1 [internal] load build definition from Dockerfile
#2 [internal] load .dockerignore
#3 [1/5] FROM debian:bookworm-slim
...

=== STDERR ===

Notes: - Shows the most recent Docker build output - Useful for debugging deployment failures - Logs are stored in {app_path}/log/build.log - Use deploy -v or deploy --debug to see output during deployment


hop3 app:restart

Restart an application.

Usage:

hop3 app:restart <app_name>

Example:

hop3 app:restart myapp

Notes: - Graceful restart (waits for requests to complete) - Reloads environment variables - Zero-downtime for apps with multiple processes


hop3 app:start

Start a stopped application.

Usage:

hop3 app:start <app_name>


hop3 app:stop

Stop a running application.

Usage:

hop3 app:stop <app_name>

Notes: - Gracefully stops all processes - Application remains configured (can be restarted)


hop3 app:debug

Show comprehensive debug information for an application.

Usage:

hop3 app:debug <app_name>

Notes: - Collects environment, logs, process status, and configuration - Useful for troubleshooting deployment issues


hop3 app:env

Show environment variables with their sources.

Usage:

hop3 app:env <app_name>

Notes: - Shows where each variable comes from (hop3.toml, config:set, addon, etc.) - Useful for debugging configuration issues


hop3 app:ping

Check if an application is responding to HTTP requests.

Usage:

hop3 app:ping <app_name>

Notes: - Performs HTTP health check on the application - Returns response status and time


hop3 app:destroy ⚠️

DESTRUCTIVE - Destroy an app, removing all files and configuration.

Usage:

hop3 app:destroy <app_name>

Confirmation Required:

WARNING: This will permanently delete the app 'myapp' and all its data.
Type the app name to confirm: myapp

What Gets Deleted: - All source code - All data in /data directory - All environment variables - All attached services (credentials removed) - All backups - Reverse proxy configuration

Skip Confirmation:

hop3 app:destroy myapp --yes

⚠️ WARNING: This operation is irreversible. Always backup before destroying.


Configuration Management

hop3 config:show

Show all environment variables for an app.

Usage:

hop3 config:show <app_name>

Example Output:

Environment Variables for myapp:

DATABASE_URL=postgresql://user:pass@localhost/db
REDIS_URL=redis://localhost:6379
SECRET_KEY=***hidden***
DEBUG=false

Notes: - Sensitive values masked by default - Use config:get to retrieve specific values


hop3 config:get

Get a specific environment variable value.

Usage:

hop3 config:get <app_name> <KEY>

Example:

hop3 config:get myapp DATABASE_URL
# Output: postgresql://user:pass@localhost/db


hop3 config:set

Set environment variables for an app.

Usage:

hop3 config:set <app_name> KEY1=value1 [KEY2=value2 ...]

Arguments: - app_name - Name of application - KEY=value - One or more key-value pairs

Examples:

# Set single variable
hop3 config:set myapp DEBUG=true

# Set multiple variables
hop3 config:set myapp \
  DATABASE_URL=postgresql://localhost/db \
  REDIS_URL=redis://localhost:6379 \
  SECRET_KEY=mysecret

# Set variable with spaces (quote the value)
hop3 config:set myapp MESSAGE="Hello World"

Notes: - Requires app restart to take effect: hop3 app:restart myapp - Values are stored encrypted in database - No leading/trailing whitespace in keys


hop3 config:unset

Unset (remove) environment variables for an app.

Usage:

hop3 config:unset <app_name> KEY1 [KEY2 ...]

Arguments: - app_name - Name of application - KEY - One or more keys to remove

Examples:

# Remove single variable
hop3 config:unset myapp DEBUG

# Remove multiple variables
hop3 config:unset myapp OLD_KEY DEPRECATED_VAR UNUSED_SECRET


hop3 config:live

Show live runtime environment of running app.

Usage:

hop3 config:live <app_name>

Notes: - Shows environment as currently loaded by running processes - Useful for debugging configuration issues


hop3 config:migrate

Migrate configuration from other PaaS formats to hop3.toml.

Usage:

hop3 config:migrate [--format heroku|flyio|procfile] [--dry-run] [--backup]

Options: - --format - Source format (heroku, flyio, procfile) - --dry-run - Preview without writing file - --backup - Create backup of existing hop3.toml

Example:

# Migrate Procfile to hop3.toml
cd myapp/
hop3 config:migrate --format procfile --dry-run

# Apply migration with backup
hop3 config:migrate --format procfile --backup


Backup and Restore

hop3 backup:create

Create a backup of an application.

Usage:

hop3 backup:create <app_name> [--description "text"]

Arguments: - app_name - Name of application to backup

Options: - --description - Optional description for the backup

Example:

hop3 backup:create myapp --description "Before major upgrade"

What Gets Backed Up: - Application source code (git archive if available) - Data directory (/data) - Environment variables - Attached services (database dumps, etc.)

Output:

Creating backup for myapp...
├─ Backing up source code... ✓
├─ Backing up data directory... ✓
├─ Backing up environment variables... ✓
└─ Backing up services (postgres: myapp-db)... ✓

Backup created: backup-myapp-20251112-143022
Location: /home/hop3/.hop3/backups/backup-myapp-20251112-143022.tar.gz
Size: 45.2 MB

See Also: Backup and Restore Guide


hop3 backup:list

List all backups, optionally filtered by application.

Usage:

hop3 backup:list [app_name]

Examples:

# List all backups
hop3 backup:list

# List backups for specific app
hop3 backup:list myapp

Example Output:

┌───────────────────────────────────────────────────────────────────┐
│ Backups for myapp                                                 │
├─────────────────────────────┬──────────┬───────────────┬──────────┤
│ Backup ID                   │ Size     │ Created       │ Services │
├─────────────────────────────┼──────────┼───────────────┼──────────┤
│ backup-myapp-20251112-14302 │ 45.2 MB  │ 2 hours ago   │ postgres │
│ backup-myapp-20251110-09153 │ 43.1 MB  │ 2 days ago    │ postgres │
└─────────────────────────────┴──────────┴───────────────┴──────────┘


hop3 backup:info

Show detailed information about a backup.

Usage:

hop3 backup:info <backup_id>

Example Output:

Backup Information

Backup ID: backup-myapp-20251112-143022
Application: myapp
Created: 2025-11-12 14:30:22 UTC (2 hours ago)
Size: 45.2 MB
Description: Before major upgrade

Contents:
├─ Source code: 2.1 MB (git commit: abc123f)
├─ Data directory: 15.3 MB (145 files)
├─ Environment variables: 12 variables
└─ Services:
   └─ postgres (myapp-db): 27.8 MB

Checksums (SHA256):
├─ source.tar.gz: 3f7a8b2c...
├─ data.tar.gz: 9d4e1a5f...
└─ services/postgres-myapp-db.sql: 7c2b9e4a...


hop3 backup:restore

Restore an application from a backup.

Usage:

hop3 backup:restore <backup_id> [--app new_app_name]

Arguments: - backup_id - ID of backup to restore

Options: - --app - Restore to different app name (default: original app name)

Examples:

# Restore to original app (overwrites existing)
hop3 backup:restore backup-myapp-20251112-143022

# Restore to new app name
hop3 backup:restore backup-myapp-20251112-143022 --app myapp-restored

Process: 1. Creates application if it doesn't exist 2. Restores source code 3. Restores data directory 4. Restores environment variables 5. Restores services (databases, etc.) 6. Verifies checksums

Notes: - Does not automatically start the app (use hop3 app:start) - Restoring to existing app overwrites data (confirmation required)


hop3 backup:delete ⚠️

DESTRUCTIVE - Delete a backup.

Usage:

hop3 backup:delete <backup_id>

Confirmation Required:

WARNING: This will permanently delete the backup 'backup-myapp-20251112-143022'.
Type 'DELETE' to confirm: DELETE

Skip Confirmation:

hop3 backup:delete backup-myapp-20251112-143022 --yes


Services (Addons)

Services are backing infrastructure (databases, caches, queues) that can be attached to applications.

hop3 addons:create

Create a new backing service instance.

Usage:

hop3 addons:create <service_type> <service_name>

Arguments: - service_type - Type of service (postgres, redis, etc.) - service_name - Name for this service instance

Example:

hop3 addons:create postgres myapp-db

Output:

Service 'myapp-db' of type 'postgres' created successfully.

To attach this service to an app, run:
  hop3 addons:attach myapp-db --app <app-name>

Notes: - Service created but not yet attached to any app - Credentials generated and stored encrypted - Use addons:attach to connect to an application


hop3 addons:attach

Attach a service to an application.

Usage:

hop3 addons:attach <service_name> --app <app_name> [--service-type <type>]

Arguments: - service_name - Name of service to attach - --app - Name of application

Options: - --service-type - Service type (default: postgres)

Example:

hop3 addons:attach myapp-db --app myapp --service-type postgres

Output:

Service 'myapp-db' attached to app 'myapp' successfully.

Environment variables:
  Added DATABASE_URL
  Added DB_USER
  Added DB_PASSWORD
  Added DB_NAME

Restart your app for changes to take effect:
  hop3 app:restart myapp

What Happens: - Service connection details added as environment variables - Credentials stored encrypted in database - App must be restarted to use new variables


hop3 addons:detach

Detach a service from an application.

Usage:

hop3 addons:detach <service_name> --app <app_name> [--service-type <type>]

Example:

hop3 addons:detach myapp-db --app myapp

Notes: - Removes environment variables from app - Does not destroy the service itself - Credentials removed from app


hop3 addons:destroy ⚠️

DESTRUCTIVE - Destroy a service instance.

Usage:

hop3 addons:destroy <service_name> [--service-type <type>]

Warning:

WARNING: This will permanently delete all data in service 'myapp-db'!
Type the service name to confirm: myapp-db

What Gets Deleted: - All data in the service (database, cache, etc.) - All credentials across all apps - Service configuration

Notes: - Service must be detached from all apps first (or use --force) - Backups are NOT automatically created (use backup:create first)


hop3 addons:info

Get information about a service instance.

Usage:

hop3 addons:info <service_name> [--service-type <type>]

Example Output:

Service: myapp-db
Type: postgres

Status: Running
Version: PostgreSQL 14.5
Size: 127 MB
Tables: 15
Connections: 3 active


hop3 addons:list

List available addon types.

Usage:

hop3 addons:list [--type <type>]

Options: - --type - Filter by addon type (postgres, mysql, redis)

Example:

# List all addon types
hop3 addons:list

# List PostgreSQL addons
hop3 addons:list --type postgres


hop3 addons:status

Show detailed status and health of an addon.

Usage:

hop3 addons:status <service_name> [--type <type>]

Notes: - Shows connection status, health checks, and resource usage - More detailed than addons:info


Admin Commands

Admin commands require admin role. First user registered automatically gets admin role.

hop3 admin:user:list

List all user accounts.

Usage:

hop3 admin:user:list

Example Output:

┌────────────────────────────────────────────────────────────┐
│ Users                                                      │
├──────────┬───────────────────────┬────────────┬───────────┤
│ Username │ Email                 │ Roles      │ Status    │
├──────────┼───────────────────────┼────────────┼───────────┤
│ alice    │ alice@example.com     │ admin,user │ Active    │
│ bob      │ bob@example.com       │ user       │ Active    │
│ charlie  │ charlie@example.com   │ user       │ Disabled  │
└──────────┴───────────────────────┴────────────┴───────────┘


hop3 admin:user:add

Create a new user account.

Usage:

hop3 admin:user:add <username> <email> <password>


hop3 admin:user:info

Display detailed information about a user.

Usage:

hop3 admin:user:info <username>


hop3 admin:user:set-password

Reset a user's password.

Usage:

hop3 admin:user:set-password <username> <new_password>


hop3 admin:user:disable

Disable a user account (prevents login).

Usage:

hop3 admin:user:disable <username>


hop3 admin:user:enable

Enable a disabled user account.

Usage:

hop3 admin:user:enable <username>


hop3 admin:user:remove

Remove a user account.

Usage:

hop3 admin:user:remove <username>


hop3 admin:user:grant-admin

Grant admin privileges to a user.

Usage:

hop3 admin:user:grant-admin <username>


hop3 admin:user:revoke-admin

Revoke admin privileges from a user.

Usage:

hop3 admin:user:revoke-admin <username>


hop3 admin:user:generate-token

Generate a new API token for a user (bootstrap helper).

Usage:

hop3 admin:user:generate-token <username>

Example Output:

Token generated for user 'alice':
eyJ0eXAiOiJKV1QiLCJhbGc...

Notes: - Useful for CI/CD or automated scripts - Token does not expire by default (set expiration in config)


System Commands

hop3 system:status

Show Hop3 system status.

Usage:

hop3 system:status

Example Output:

Hop3 System Status

Version: 0.4.0
Uptime: 14 days 6 hours
Applications: 12 running, 3 stopped
Services: 8 running
Disk Usage: 45% (23 GB / 50 GB)
Memory: 62% (4.8 GB / 8 GB)


hop3 system:uptime

Show host server uptime.

Usage:

hop3 system:uptime


hop3 system:ps

List all server processes.

Usage:

hop3 system:ps

Example Output:

┌──────────────────────────────────────────────────────────────┐
│ System Processes                                             │
├─────────┬────────────┬─────────────────┬───────────┬────────┤
│ PID     │ App        │ Type            │ CPU       │ Memory │
├─────────┼────────────┼─────────────────┼───────────┼────────┤
│ 12345   │ myapp      │ web             │ 2.1%      │ 125 MB │
│ 12346   │ myapp      │ worker          │ 0.8%      │ 98 MB  │
│ 12347   │ testapp    │ web             │ 0.2%      │ 67 MB  │
└─────────┴────────────┴─────────────────┴───────────┴────────┘


hop3 system:check

Run comprehensive health checks on the Hop3 server.

Usage:

hop3 system:check [--verbose]

Options: - --verbose - Show detailed check results

What Gets Checked: - Core services (hop3-server, nginx, uwsgi) - Database addons (PostgreSQL, MySQL, Redis) - Filesystem permissions - Disk space - SSL certificates


hop3 system:cleanup

Clean up unused Docker resources (networks, images, containers, volumes).

Usage:

hop3 system:cleanup [--dry-run]

Options: - --dry-run - Show what would be cleaned without removing anything

Notes: - Removes dangling images and unused networks - Does not remove volumes by default (use --volumes flag)


hop3 system:info

Show detailed Hop3 system information.

Usage:

hop3 system:info

Example Output:

Hop3 System Information

Version: 0.4.0
Python: 3.12.1
OS: Debian GNU/Linux 12 (bookworm)
Architecture: x86_64

Paths:
  HOP3_ROOT: /home/hop3
  Config: /home/hop3/.config/hop3
  Apps: /home/hop3/apps

Services:
  hop3-server: running (pid 1234)
  nginx: running
  uwsgi-hop3: running


hop3 system:logs

Show Hop3 server logs.

Usage:

hop3 system:logs [--lines N] [--follow]

Options: - --lines N - Number of lines to show (default: 100) - --follow - Follow log output in real-time


Miscellaneous Commands

hop3 help

Display help information.

Usage:

hop3 help [command]

Examples:

# General help
hop3 help

# Help for specific command
hop3 help deploy
hop3 help backup:create


hop3 help:commands

Return list of available command names for shell completion.

Usage:

hop3 help:commands

Notes: - Returns plain text list of command names - Used internally by shell completion scripts


hop3 completion

Generate shell completion scripts.

Usage:

hop3 completion <shell>

Arguments: - shell - Shell type: bash, zsh, or fish

Installation Examples:

# Bash (current session)
eval "$(hop3 completion bash)"

# Bash (permanent)
hop3 completion bash > /etc/bash_completion.d/hop3

# Zsh
hop3 completion zsh > ~/.zsh/completions/_hop3

# Fish
hop3 completion fish > ~/.config/fish/completions/hop3.fish

Options: - --refresh - Update cached command list from server - --status - Show cache status


hop3 plugins

List installed plugins and their commands.

Usage:

hop3 plugins


hop3 ps

Show process count for an app.

Usage:

hop3 ps <app_name>


hop3 ps:scale

Set the process count for an app.

Usage:

hop3 ps:scale <app_name> web=N [worker=M ...]

Example:

# Scale web processes to 3, worker processes to 2
hop3 ps:scale myapp web=3 worker=2


hop3 run

Run a command in the context of an app.

Usage:

hop3 run <app_name> <command>

Examples:

# Run database migrations
hop3 run myapp python manage.py migrate

# Open interactive shell
hop3 run myapp python manage.py shell

# Run one-off script
hop3 run myapp node scripts/cleanup.js


hop3 sbom

Generate a Software Bill of Materials (SBOM) for an app.

Usage:

hop3 sbom <app_name>

Output: - CycloneDX format JSON - Lists all dependencies with versions - Security scanning metadata


Exit Codes

The Hop3 CLI uses standard exit codes:

  • 0 - Success
  • 1 - General error
  • 2 - Invalid usage (wrong arguments)
  • 3 - Authentication error
  • 4 - Resource not found
  • 5 - Permission denied

Environment Variables

Configuration

  • HOP3_API_URL - Server URL (http://server or ssh://user@server)
  • HOP3_API_TOKEN - API authentication token (overrides ~/.hop3/token)
  • HOP3_CONTEXT - Use a specific server context (see Context Management)
  • HOP3_CONFIG_DIR - Config directory (default: ~/.hop3)
  • HOP3_VERBOSITY - Default verbosity level (0=quiet, 1=normal, 2=verbose, 3=debug)

Security

  • HOP3_SECRET_KEY - Encryption key for credentials (server-side, required in production)
  • HOP3_UNSAFE - Disable authentication (⚠️ NEVER use in production, test-only)

Development

  • HOP3_DEBUG - Enable debug logging
  • HOP3_DEV_HOST - Development server target for testing

Tips and Best Practices

Security

  1. Never use HOP3_UNSAFE in production - This completely disables authentication
  2. Protect your token - Store ~/.hop3/token with chmod 600
  3. Rotate tokens regularly - Use auth:logout and auth:login to refresh
  4. Backup HOP3_SECRET_KEY - Required to decrypt service credentials
  5. Use SSH connections - Preferred over HTTP for remote servers

Workflow

  1. Always backup before destructive operations:

    hop3 backup:create myapp --description "Before destroy"
    hop3 app:destroy myapp --yes
    

  2. Use --dry-run when available:

    hop3 config:migrate --dry-run  # Preview changes first
    

  3. Check status before and after operations:

    hop3 app:status myapp
    hop3 app:restart myapp
    hop3 app:status myapp  # Verify restart
    

  4. Use --json for automation:

    apps=$(hop3 apps --json | jq -r '.apps[].name')
    for app in $apps; do
      hop3 backup:create "$app"
    done
    

Confirmation Prompts

Destructive commands require confirmation: - Type the resource name - For app:destroy, type the app name - Type 'DELETE' - For backup:delete and services:destroy - Skip with -y - Use --yes flag to auto-confirm (use carefully!)

Example:

$ hop3 app:destroy myapp
WARNING: This will permanently delete the app 'myapp' and all its data.
Type the app name to confirm: myapp
 App 'myapp' destroyed successfully.


Getting Help

Command-specific Help

hop3 help <command>
hop3 <command> --help

Documentation

Community


Last Updated: 2026-02-13 CLI Version: 0.4.0 Server Version: 0.4.0