Your agency has asked for access to Fly.io. You don't need to share your password for it. Fly.io lets you add them with their own login, choose exactly what they can do, and remove them when the project ends. These are the clicks, checked against Fly.io's own help pages in November 2026.
Which role to choose
Pick the narrowest role that lets your agency do the work. Member is usually the right one.
| Role | What it allows | For an agency |
|---|---|---|
| Member | Creates, deploys and destroys apps and manages their secrets, volumes and Machines. Cannot invite people, see billing or delete the organization. | Usually the right one |
| Admin | Everything a Member does, plus inviting and removing people, billing and deleting the organization. | If the work needs it |
Add your agency to Fly.io
Admin
Everything a Member does, plus inviting and removing people, billing and deleting the organization.
Open Dashboard Choose your organization from the Organization dropdown, then go to Team.
- Sign in to the Fly.io dashboard and choose your organization from the Organization dropdown.
- Go to Team and click Invite Member. Enter your agency's email address and send the invite.
- Once your agency has accepted, find your agency's email address on the Team page and promote it to Admin.
Only an Admin can invite. If your organization requires Google or GitHub single sign-on, your agency must sign in that way.
Member
Open Dashboard Choose your organization from the Organization dropdown, then go to Team.
- Sign in to the Fly.io dashboard and choose your organization from the Organization dropdown.
- Go to Team and click Invite Member.
- Enter your agency's email address and send the invite.
Only an Admin can invite. Members cost nothing: Fly.io bills only for the resources your apps use. If your organization requires Google or GitHub single sign-on, your agency must sign in that way.
How you both know it worked
With a admin request, your agency sees your organization as active on their side once you accept it. With a member, Fly.io emails your agency an invitation from fly.io. Once they accept it, they show in your Fly.io account's list of people with access, where you can see or change their role at any time.
Remove access when the project ends
Member
- In the Fly.io dashboard, choose your organization from the Organization dropdown and go to Team.
- Next to your agency's email address, select Remove from the Options dropdown.
- Click Tokens and revoke any tokens your agency created, then do the same under Tokens in each app.
Do you have to share your password?
No. Every step above uses Fly.io's own invite, so your agency signs in with their own account, your two-step verification stays on, and anything they change is recorded under their name. How to give a developer access without sharing your password covers the other accounts agencies usually ask for.
Doing this for every client?
Agencies can send each client one GetSetKeys link instead of a page like this. It walks the client through Fly.io and the other platforms the project needs, and checks that each step is done.